Okta Architect (Contract)

At KeyData Cyber , we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence. We deliver comprehensive solutions across IAM domains, including: Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management) Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries. If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success We are currently looking for an experienced Okta Architect to join our Delivery team. In this role, you will lead the design and implementation of secure, scalable identity solutions across enterprise environments, helping clients modernize their IAM landscape and strengthen their security posture. You will act as a strategic advisor and technical leader, bridging business requirements with architecture and execution, ensuring Okta-based IAM solutions are effectively designed, integrated, and optimized for enterprise environments. Location: Canada Employment type: Contract - 6 months, Remote Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway. What You’ll Do Lead the architecture, design, and implementation of Okta solutions. Design end-to-end Identity and Access Management (IAM) architectures, including authentication, authorization, account recovery, and user lifecycle management. Architect and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and adaptive authentication solutions using Okta. Design secure identity journeys and optimize user experiences across web, mobile, and API-driven applications. Conduct discovery workshops, gather requirements, define solution architectures, and deliver Proofs of Concepts (POCs) for complex IAM use cases. Design and implement Role-Based Access Control (RBAC), fine-grained authorization models, and policy-driven access controls. Lead integrations with applications and APIs using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, and REST APIs. Drive automation, extensibility, and operational efficiency through Okta Workflows, APIs, and custom development. Provide technical leadership, architecture guidance, and mentorship to delivery teams and client stakeholders. Ensure solutions align with security best practices, privacy requirements, and compliance frameworks such as GDPR, SOC 2, and ISO 27001. Develop architecture standards, implementation patterns, technical documentation, and reusable accelerators. Troubleshoot complex authentication, authorization, federation, and identity lifecycle challenges Who We’re Looking For 10+ years of experience in Identity & Access Management (IAM), with deep expertise in enterprise IAM. Proven experience architecting and implementing Okta solutions at enterprise scale. Strong expertise in OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, API security, and modern authentication patterns. Hands-on experience with Okta Universal Directory, Workflows, Lifecycle Management, MFA, Passwordless Authentication, and application integrations. Experience designing authentication, profile management, account recovery, and identity lifecycle workflows. Strong understanding of RBAC, authorization models, and identity governance. Experience integrating Okta with web, mobile, SaaS, and API ecosystems. Hands-on experience with Okta APIs, automation, custom development, and scripting. Experience delivering IAM solutions across the full software development lifecycle (SDLC). Strong understanding of security, privacy, and compliance requirements including GDPR, ISO 27001, and SOC 2. Technical background in JavaScript, Node.js, Java, or similar development technologies. Excellent client-facing communication, solution design, and consulting skills Nice-to-Have Skills Okta Certified Professional or equivalent Okta certifications. Experience with identity governance and access management. Exposure to Identity Federation, B2B Identity, and multi-tenant identity architectures. Experience with API security platforms and Zero Trust security principles. Familiarity with cloud platforms such as AWS, Azure, or GCP. Knowledge of broader IAM technologies such as SailPoint, CyberArk, Ping Identity, or ForgeRock. Experience with Infrastructure as Code (Terraform) and CI/CD pipelines for Okta deployments. The hourly rate range for this position is $70–$77 CAD per hour. The final rate will be Compensation The hourly raterange for this position is $70–$77 CAD per hour. The final rate will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. This is a 6-month, full-time contract role, working 40 hours a week. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization Why You’ll Love Working Here At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone. Accessibility & Accommodations If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition, and we will make all reasonable efforts to accommodate your request. Fraud Prevention & Identity Verification We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process. #J-18808-Ljbffr KeyData Cyber