OKTA Lead - L3/L4 System Administration & Okta Workflows

System Administrator

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

Key Accountabilities

• Own and govern the global OKTA platform, including architecture, standards, and roadmap
• Define and approve authentication policies, MFA controls, and security designs
• Ensure platform scalability, resilience, and alignment with enterprise security strategy
• Accountable for 24x7 availability, SLA performance, and service continuity
• Act as final escalation points for critical authentication and access incidents
• Lead P1/P2 major incidents, root cause analysis, and remediation actions
• Define and maintain on-call, escalation, and support readiness models
• Ensure OKTA services meet security, audit, and regulatory requirements
• Partner with SOC, GRC, and Audit teams on risk assessments and compliance activities
• Own remediation plans for identified security gaps or audit findings
• Provide technical and functional leadership to global IAM teams
• Act as a trusted advisor to senior IT and Security leadership
• Mentor senior engineers and ensure effective knowledge transfer

Skills & Experience

Essential

• 12–15+ years of experience in IAM / Security / System Administration
• 2+ years of hands-on OKTA administration, with strong focus on OKTA
• Proven experience supporting enterprise IAM platforms in 24x7 environments
• Strong expertise in authentication, MFA, and identity federation concepts
• OKTA Workflow management.
• Day-to-day OKTA platform support including policy management, group updates, and rule modifications.
• Expertise in OKTA App integration.
• Handling BAU incident tickets, including analysis, resolution, and coordination.
• Deployment and upgrades of new OKTA agents as required.
• Maintenance and patching of OKTA AD agents, coordination with Kyndryl server teams, monitoring agent health, and remediation of agent disconnects.
• Handling day-to-day BAU service requests related to OKTA and IAM services.
• Managing network zone configurations, including addition and updates of IP whitelisting.
• Regular maintenance and updates of CMDB records, including application details and ownership information.
• Management of OKTA-mastered application lists and approver configurations, with regular CMDB updates.
• Handle OKTA L3 SMEs.
• Understanding the creation of workflows in OKTA.
• Provisioning and management of OKTA administrative access.
• Periodic review and revalidation of OKTA admin access.
• Provisioning and lifecycle management of service accounts.
• Periodic revalidation and certification of service account access.
• Ongoing governance and updates of OKTA-mastered accounts and approver lists within CMDB.
• Hypercare services for new implementations, criteria changes, and upgrades, including issue resolution post-migration.
• Single Sign-On
• Adaptive MFA
• Lifecycle Management
• API Access Management
• Provide performance administration account and service account attestation within the Okta service
• Provide IP address whitelisting management within the Okta product
• Perform patch management within the Okta product
• Provide support for audits including remediation of findings that can be delivered as small changes
• Provide group creation, modification and removal
• Plan and execute software upgrades, including compatibility testing and user migration strategies for new releases
• Support group synchronization

Desirable

• Experience in large, global enterprise environments
• Exposure to Zero Trust and modern identity security frameworks

Required Technical and Professional Expertise

• OKTA professional Certified (Mandatory)
• OKTA admin certified, OKTA Certified Consultant / Architect, Security certifications (CISSP / CISM) – desirable

Preferred Technical and Professional Experience

• Automation experience. OKTA Workflow developer,
• Microsoft Active Directory and federation services

The "Kyn" in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don't meet every requirement, we encourage you to apply. We believe in growth, and we're excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That's The Kyndryl Way.

Your career with us isn't just a job—it's an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best. From your very first day, you'll dive into impactful work that powers the systems our customers rely on every day. You won't just contribute—you'll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth. We're here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you'll have everything you need to thrive and evolve. You'll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you'll be part of a culture that values empathy, restless learning, and a devotion to shared success. We want you to thrive here—and we're committed to helping you do just that. Ready to make an impact? Join us and help shape what's next.

Get Referred!

If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.