Senior IAM Engineer - Okta App Migration Consultant

About the role

EY's Cybersecurity / Identity & Access Management practice is looking for a Senior Okta App Migration Consultant to support a US client account. The role leads application migration and onboarding into Okta, covering secure authentication and federation, testing and cutover readiness, and delivery documentation. It calls for strong hands-on Okta experience, client-facing communication and the ability to coordinate across multiple stakeholders.

Key responsibilities

• Lead application migration and onboarding into Okta, including requirement gathering, design validation, implementation, testing and production support.
• Run discovery sessions with business and technical stakeholders on authentication methods, access requirements, dependencies and migration constraints.
• Configure and support SSO integrations using SAML 2.0, OIDC and OAuth 2.0.
• Implement and validate Okta sign-on policies, MFA requirements, user/group mappings and access flows.
• Support migration planning, test execution, cutover readiness, defect resolution and post-go-live stabilization and hypercare.
• Coordinate with application owners, infrastructure and security teams and delivery leadership.
• Troubleshoot complex authentication, federation, provisioning and policy issues.
• Prepare technical documentation such as requirement and design documents, runbooks, KT materials and status updates.
• Support knowledge transfer to operations teams and mentor junior consultants.

Required profile

• At least 2 or 3 years of relevant experience.
• Ability to work independently and collaborate across distributed EY and client teams.
• Client-facing comfort, with strong ownership, quality focus and delivery discipline.

Required skills

• Hands-on IAM experience with Okta application onboarding and migration.
• SAML 2.0, OIDC and OAuth 2.0, MFA and sign-on policies.
• Active Directory integration and identity lifecycle awareness.
• Testing, defect remediation, cutover and production stabilization.
• Technical and operational documentation.

Nice to have: Okta Org2Org or tenant migration, Okta APIs and workflows, Terraform, GitHub or Jenkins, Microsoft Entra ID, PingFederate, CyberArk or SailPoint, banking or regulated industry experience, and Okta certifications.