14 hours ago
Toronto, CanadaStaff+
Responsibilities
- Own the technical roadmap and architecture for enterprise Identity and Access Management with Okta as the core platform.
- Architect and improve Okta SSO, authentication, lifecycle automation, Workflows, Identity Governance, and Access Requests.
- Design reliable onboarding, role-change, and offboarding processes for employees, contractors, partners, and other user populations.
- Build integrations between Okta and systems including Workday, Google Workspace, Slack, GitHub, Atlassian, MDM, and other enterprise applications.
- Drive identity automation using Okta Workflows, APIs, scripting, Terraform, and related engineering tools.
- Modernize identity configuration management through infrastructure as code, automated validation, peer review, and controlled deployment.
- Lead access reviews, access requests, role-based access, approval workflows, entitlement management, and least-privilege initiatives.
- Implement authentication, federation, and provisioning solutions using SAML, OIDC, OAuth 2.0, SCIM, and MFA.
- Partner with Security on authentication standards, privileged access, identity risk, and zero-trust initiatives.
- Support IAM-related SOX controls, audit evidence, access reviews, remediation, and identity governance automation.
- Design identity solutions for partners, resellers, service accounts, machine identities, and other non-standard access needs.
- Act as a senior escalation point, lead root cause analysis, reduce manual administration, and create self-service workflows and runbooks.
- Establish repeatable standards for designing, testing, deploying, and documenting identity changes.
- Mentor engineers, build IAM expertise and backup coverage, and evaluate emerging identity capabilities.
Requirements
- Deep hands-on Okta expertise in complex enterprise environments, including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance.
- Advanced understanding of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization.
- Experience automating employee onboarding, role changes, and offboarding using an HRIS such as Workday as the authoritative employee-data source.
- Strong experience with access reviews, entitlement management, access requests, role-based access control, and least privilege.
- Strong scripting and automation skills using Python, PowerShell, or similar languages.
- Strong API integration experience connecting identity platforms with broader enterprise systems.
- Experience with Terraform or another infrastructure-as-code framework.
- Experience converting manual identity administration into scalable, automated, and auditable processes.
- Experience supporting IAM controls in a SOX-regulated or similarly controlled environment.
- Ability to lead complex cross-functional IAM initiatives without formal people-management authority.
- Strong communication skills for explaining identity architecture, technical decisions, and risk to technical and non-technical audiences.
- Preferred qualifications include Okta certifications, Git-based workflows or CI/CD experience, familiarity with Google Workspace, Slack, GitHub, Atlassian, Iru, Kandji, Jamf, Zscaler, or 1Password, and experience with partner, reseller, B2B, service-account, machine-identity, workload-identity, or audit-automation architectures.
Benefits
- Competitive compensation that may include equity and restricted stock units.
- Retirement and Employee Stock Purchase Plans.
- Flexible paid time off and comprehensive medical, dental, vision, life, and disability coverage.
- Family services including fertility benefits and equal paid parental leave.
- Professional development, formal career pathing, learning platforms, and a yearly learning stipend.
- Hybrid work with a curated in-office employee experience.
- Volunteer Week, donation matching, and Employee Resource Groups.
- Benefits vary by location, with specific country offerings provided during the hiring process.
About Braze
Braze builds a customer engagement platform used by marketing teams to orchestrate cross-channel messaging across mobile, email, web, and more. The company sells its software via SaaS subscriptions with analytics, segmentation, and journey orchestration. Founded in 2011 and headquartered in New York, Braze is a public company (NASDAQ: BRZE) with global offices.