IAM Engineer - Okta App Migration Consultant - Senior - EY Global Delivery Services

Job Title: IAM Engineer – Okta App Migration Consultant

Location: Argentina

Experience: at least 2 or 3 years of relevant experience

Role Summary

The Senior Okta App Migration Consultant will support the US client account within EY’s Cybersecurity / Identity & Access Management practice. This role is responsible for leading application migration and onboarding activities into Okta, supporting secure authentication and federation capabilities, coordinating testing and cutover readiness, and producing high-quality delivery documentation. The role requires strong hands-on Okta experience, client-facing communication skills, and the ability to drive migration activities across multiple stakeholders and environments.

Core Responsibilities

Lead application migration and onboarding activities into Okta, including requirement gathering, design validation, implementation, testing, and production support.

Conduct discovery sessions with business and technical stakeholders to understand authentication methods, access requirements, dependencies, and migration constraints.

Configure and support SSO integrations using SAML , OIDC, and OAuth for enterprise applications.

Implement and validate Okta sign-on policies, MFA requirements, user/group mappings, and access flows aligned with client expectations.

Support migration planning, test execution, cutover readiness, defect resolution, and post-go-live stabilization / hypercare.

Coordinate with application owners, infrastructure teams, security teams, and delivery leadership to ensure smooth and timely execution.

Troubleshoot complex authentication, federation, provisioning, and policy-related issues during onboarding and migration.

Prepare and maintain technical documentation including requirement documents, design documents, runbooks, KT materials, and status updates.

Support knowledge transfer to operations teams and mentor junior consultants where needed.

Required Skills

Hands-on experience in IAM with strong delivery experience in Okta application onboarding and migration.

Strong knowledge of Okta SSO integrations and authentication standards including SAML , OIDC, and OAuth

Experience with MFA implementation, sign-on policies, access policies, and secure authentication design.

Working knowledge of Active Directory integrations, delegated authentication, and identity lifecycle considerations.

Experience supporting testing, defect remediation, cutover, and production stabilization for IAM / SSO migrations.

Strong troubleshooting, analytical, communication, and stakeholder management skills.
Ability to create high-quality technical and operational documentation.

Good to Have

Experience with Okta Org2Org, tenant migration, routing rules, or large-scale identity transformation programs. Experience with Okta APIs, Okta Workflows, or automation for onboarding and migration activities. Exposure to Terraform, GitHub, Jenkins, or related CI/CD tooling. Familiarity with Microsoft Entra ID, PingFederate, CyberArk, or SailPoint in hybrid IAM environments. Prior experience in banking, financial services, or regulated environments. Okta certifications such as Okta Certified Professional or Okta Certified Administrator.

Additional Expectations

Ability to work independently and collaborate effectively across distributed EY and client teams. Strong ownership mindset with focus on quality, accountability, and delivery discipline. Comfortable working in client-facing roles, leading discussions, and providing concise status updates. Support mentoring, knowledge sharing, and operational handoff activities as part of the EY delivery model.