The opportunity
Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era.
What you'll do
OIG Architecture Ownership: Own OIG architecture end-to-end — design access request workflows, entitlement/Resource Collections structures, and certification campaigns that reduce reviewer fatigue and rubber-stamping.
Lifecycle, Birthright & RBAC Strategy: Lead lifecycle, birthright, and RBAC strategy — design and deploy automated birthright access rules, RBAC frameworks, and seamless joiner/mover/leaver (JML) processes across the enterprise.
Workday Integration Architecture: Drive Workday integration architecture — balance scheduled reconciliation (attribute accuracy) with Real-Time Sync (immediate termination), and define the attribute sets that access rules depend on.
Mover/Leaver Automation: Design and harden mover/leaver automation — implement attribute-driven group re-evaluation on role changes, safe decommissioning of stale access, and close gaps between automated joiner flows and historically manual processes.
OPA, ISPM & Zero Standing Privilege: Lead OPA, ISPM, and Zero Standing Privilege (ZSP) initiatives — design privileged session access, Just-In-Time (JIT) elevation, break-glass emergency access, identity security vulnerability detection, and tiering models for Tier 0/Tier 1 systems.
PAM & ISPM Metrics: Own PAM and ISPM telemetry and KPIs — establish and track metrics around standing-privilege reduction, JIT adoption, stale access cleanup, and break-glass test success as ongoing operational measures.
What they're looking for
- Okta Workflows Automation: Build and maintain Okta Workflows automation — streamline access requests, approvals, and remediation across IGA and PAM processes using the Okta Workflows engine.
- Technical Leadership & Mentorship: Mentor engineers, review designs, and communicate with leadership — be the technical escalation point for the team's hardest problems, help junior engineers grow, and present clear updates, risk assessments, and roadmaps to executive stakeholders.
- Domain Experience: Minimum 4+ years of direct, advanced experience managing and administering enterprise IGA, PAM/ISPM tools and platforms.
- Birthright Provisioning & RBAC: Demonstrated hands-on experience designing and deploying Birthright Provisioning models and RBAC architectures in production environments.
