We are looking for a Senior Systems Engineer, specializing in Identity and Access Management to join our Employee Tech organization and take ownership of our Okta platform across the company.

Employee Tech is responsible for delivering a secure, frictionless digital workplace experience for all employees across Canada, Europe and India. Identity is at the heart of that experience, from day-one onboarding, to role changes, to secure offboarding, to enabling access to hundreds of SaaS applications without slowing people down.

In this role, you will be our primary Okta expert, responsible for designing, operating, and evolving our identity and access management landscape. A key part of the role will be helping us mature our identity strategy, including the future implementation of Okta Identity Governance (OIG). 

A key part of the role will be helping us mature our identity strategy, including the future implementation of Okta Identity Governance (OIG). You’ll also help us scale identity operations through automation (Okta Workflows or similar low-code tools). Okta expertise is the core requirement; experience integrating Okta with endpoint management especially macOS/MDM (e.g., JAMF or similar) is a strong plus.

What you’ll do: 

• Own and operate our Okta Workforce Identity platform end-to-end (SSO, MFA, Lifecycle Management, integrations) for the entire group.
• Act as the technical authority for identity and access management, supporting Employee Tech and security stakeholders.
• Design, maintain, and improve onboarding / offboarding / role-change access flows across our SaaS ecosystem.
• Lead the planning and implementation of Okta Identity Governance (OIG), including access policies, certifications, and role models.
• Build and maintain secure, scalable integrations between Okta and key systems (e.g. HR systems, SaaS applications, device management).
• Partner closely with Employee Tech, Security, and Business stakeholders to balance security, compliance, and employee experience.
• Troubleshoot complex identity issues and act as an escalation point for authentication, access, and provisioning problems.
• Drive automation and standardization to reduce manual access requests and improve auditability, leveraging Okta Workflows (or similar low-code tools, e.g., n8n) to improve reliability and speed across joiner/mover/leaver processes.
• Contribute to documentation, standards, and knowledge sharing to reduce key-person dependency.

What you’ll bring: 

• Strong hands-on experience with Okta Workforce Identity in a medium to large enterprise environment.
• Practical experience with:
• SSO (SAML, OIDC)
• SCIM Provisioning
• MFA and conditional access policies
• Lifecycle Management
• Okta Workflows, or similar no-code/low-code automation experience
• Experience with or strong interest in Identity Governance concepts (roles, access reviews, least privilege); hands-on Okta Identity Governance (OIG) experience is a major plus.
• Solid understanding of identity fundamentals, security best practices, and access control models.
• Experience integrating Okta with SaaS platforms and cloud applications.
• Demonstrated ability to use AI tools (e.g. ChatGPT) to accelerate problem-solving, system design, and documentation while applying strong engineering judgment and security awareness.
• Comfort working in a global, distributed environment across time zones.
• Clear, pragmatic communication skills you can explain identity concepts to both technical and non-technical audiences.
• Experience with JAMF and/or Slack is a bonus, not a requirement.
• Fluency in English is required; German is a plus.