IAM Engineer - Okta App Migration Consultant - Senior - EY Global Delivery Services

Job Title:

IAM Engineer – Okta App Migration Consultant

Location: Argentina

Experience: at least 2 or 3 years of relevant experience

Role Summary

The Senior Okta App Migration Consultant will support the US client account within EY’s Cybersecurity / Identity & Access Management practice. This role is responsible for leading application migration and onboarding activities into Okta, supporting secure authentication and federation capabilities, coordinating testing and cutover readiness, and producing high-quality delivery documentation. The role requires strong hands-on Okta experience, client-facing communication skills, and the ability to drive migration activities across multiple stakeholders and environments.

Core Responsibilities

• Lead application migration and onboarding activities into Okta, including requirement gathering, design validation, implementation, testing, and production support.

• Conduct discovery sessions with business and technical stakeholders to understand authentication methods, access requirements, dependencies, and migration constraints.

• Configure and support SSO integrations using SAML 2.0, OIDC, and OAuth 2.0 for enterprise applications.

• Implement and validate Okta sign-on policies, MFA requirements, user/group mappings, and access flows aligned with client expectations.

• Support migration planning, test execution, cutover readiness, defect resolution, and post-go-live stabilization / hypercare.

• Coordinate with application owners, infrastructure teams, security teams, and delivery leadership to ensure smooth and timely execution.

• Troubleshoot complex authentication, federation, provisioning, and policy-related issues during onboarding and migration.

• Prepare and maintain technical documentation including requirement documents, design documents, runbooks, KT materials, and status updates.

• Support knowledge transfer to operations teams and mentor junior consultants where needed.

Required Skills

• Hands-on experience in IAM with strong delivery experience in Okta application onboarding and migration.

• Strong knowledge of Okta SSO integrations and authentication standards including SAML 2.0, OIDC, and OAuth 2.0.

• Experience with MFA implementation, sign-on policies, access policies, and secure authentication design.

• Working knowledge of Active Directory integrations, delegated authentication, and identity lifecycle considerations.

• Experience supporting testing, defect remediation, cutover, and production stabilization for IAM / SSO migrations.

• Strong troubleshooting, analytical, communication, and stakeholder management skills.

Ability to create high-quality technical and operational documentation.

Good to Have

• Experience with Okta Org2Org, tenant migration, routing rules, or large-scale identity transformation programs.

• Experience with Okta APIs, Okta Workflows, or automation for onboarding and migration activities.

• Exposure to Terraform, GitHub, Jenkins, or related CI/CD tooling.

• Familiarity with Microsoft Entra ID, Ping Federate, Cyber Ark, or Sail Point in hybrid IAM environments.

• Prior experience in banking, financial services, or regulated environments.

• Okta certifications such as Okta Certified Professional or Okta Certified Administrator.

Additional Expectations

• Ability to work independently and collaborate effectively across distributed EY and client teams.

• Strong ownership mindset with focus on quality, accountability, and delivery discipline.

• Comfortable working in client-facing roles, leading discussions, and providing concise status updates.

• Support mentoring, knowledge sharing, and operational handoff activities as part of the EY delivery model.