Skills/Experience:
- 8–12 years in IT security, identity management, or enterprise architecture roles. Work with Architect Team (Okta and Enterprise Architect) to validate the current Technical Design is fit for purpose
- Lead architecture discussions for PAM and IAM solutions. Understanding of TOGAF or similar EA frameworks.
- Design scalable identity solutions leveraging Okta Workforce Identity Cloud and Okta Privileged Access. Ensure alignment with Zero Trust principles and Australian regulatory standards.
- Apply existing security policies; create new ones if required. Security & Compliance experience with NIST SP 800-53, ISO 27001 and Australian Cyber Security Centre (ACSC) Essential Eight.
- Integrate Okta with enterprise systems (Oracle CC&B, Infoserver, ITSM, CICD pipelines). Oversee configuration of SSO, MFA, RBAC/ABAC, and lifecycle management.
- Develop technical design documents, data flow diagrams, and security architecture blueprints. Conduct workshops and training for stakeholders.
- Okta Workforce Identity Cloud (SSO, MFA, Universal Directory). Okta Privileged Access (credential vaulting, least privilege enforcement, SSH/RDP session recording). Integration via OIDC, SCIM, and API provisioning.
- Privileged Access Management: PAM tools (Okta Privileged Access, CyberArk, BeyondTrust). Credential rotation, vaulting, and compliance reporting. Identity Governance & Administration (IGA).
- Role-based and attribute-based access control (RBAC/ABAC). Zero Trust Architecture.
- Preferred experience: Okta Certified Technical Architect, CISSP, CCSP, or similar security certifications.
- Prior experience in Australian Utility market will be an added advantage
