IAM Engineer - Okta App Migration Consultant - Senior - EY Global Delivery Services

Location: Argentina

Experience: at least 2 or 3 years of relevant experience

The Senior Okta App Migration Consultant will support the US client account within EY’s Cybersecurity / Identity & Access Management practice. This role is responsible for leading application migration and onboarding activities into Okta, supporting secure authentication and federation capabilities, coordinating testing and cutover readiness, and producing high-quality delivery documentation. The role requires strong hands-on Okta experience, client-facing communication skills, and the ability to drive migration activities across multiple stakeholders and environments.

• Lead application migration and onboarding activities into Okta, including requirement gathering, design validation, implementation, testing, and production support.
• Conduct discovery sessions with business and technical stakeholders to understand authentication methods, access requirements, dependencies, and migration constraints.
• Configure and support SSO integrations using SAML 2.0, OIDC, and OAuth 2.0 for enterprise applications.
• Implement and validate Okta sign-on policies, MFA requirements, user/group mappings, and access flows aligned with client expectations.
• Support migration planning, test execution, cutover readiness, defect resolution, and post-go-live stabilization / hypercare.
• Coordinate with application owners, infrastructure teams, security teams, and delivery leadership to ensure smooth and timely execution.
• Troubleshoot complex authentication, federation, provisioning, and policy-related issues during onboarding and migration.
• Prepare and maintain technical documentation including requirement documents, design documents, runbooks, KT materials, and status updates.
• Support knowledge transfer to operations teams and mentor junior consultants where needed.

• Hands-on experience in IAM with strong delivery experience in Okta application onboarding and migration.
• Strong knowledge of Okta SSO integrations and authentication standards including SAML 2.0, OIDC, and OAuth 2.0.
• Experience with MFA implementation, sign-on policies, access policies, and secure authentication design.
• Working knowledge of Active Directory integrations, delegated authentication, and identity lifecycle considerations.
• Experience supporting testing, defect remediation, cutover, and production stabilization for IAM / SSO migrations.
• Strong troubleshooting, analytical, communication, and stakeholder management skills.
  
  • Ability to create high-quality technical and operational documentation.
  Good to Have
  • Experience with Okta Org2Org, tenant migration, routing rules, or large-scale identity transformation programs.
  • Experience with Okta APIs, Okta Workflows, or automation for onboarding and migration activities.
  • Exposure to Terraform, GitHub, Jenkins, or related CI/CD tooling.
  • Familiarity with Microsoft Entra ID, PingFederate, CyberArk, or SailPoint in hybrid IAM environments.
  • Prior experience in banking, financial services, or regulated environments.
  • Okta certifications such as Okta Certified Professional or Okta Certified Administrator.
  Additional Expectations
  • Ability to work independently and collaborate effectively across distributed EY and client teams.
  • Strong ownership mindset with focus on quality, accountability, and delivery discipline.
  • Comfortable working in client-facing roles, leading discussions, and providing concise status updates.
  • Support mentoring, knowledge sharing, and operational handoff activities as part of the EY delivery model.