Job Title: IAM Engineer – Okta App Migration Consultant

Location: Argentina

Experience: at least 2 or 3 years of relevant experience

Role Summary

The Senior Okta App Migration Consultant will support the US client account within EY’s Cybersecurity / Identity & Access Management practice. This role is responsible for leading application migration and onboarding activities into Okta, supporting secure authentication and federation capabilities, coordinating testing and cutover readiness, and producing high-quality delivery documentation. The role requires strong hands-on Okta experience, client-facing communication skills, and the ability to drive migration activities across multiple stakeholders and environments.

Core Responsibilities

- Lead application migration and onboarding activities into Okta, including requirement gathering, design validation, implementation, testing, and production support.
- Conduct discovery sessions with business and technical stakeholders to understand authentication methods, access requirements, dependencies, and migration constraints.
- Configure and support SSO integrations using SAML 2.0, OIDC, and OAuth 2.0 for enterprise applications.
- Implement and validate Okta sign-on policies, MFA requirements, user/group mappings, and access flows aligned with client expectations.
- Support migration planning, test execution, cutover readiness, defect resolution, and post-go-live stabilization / hypercare.
- Coordinate with application owners, infrastructure teams, security teams, and delivery leadership to ensure smooth and timely execution.
- Troubleshoot complex authentication, federation, provisioning, and policy-related issues during onboarding and migration.
- Prepare and maintain technical documentation including requirement documents, design documents, runbooks, KT materials, and status updates.




- Support knowledge transfer to operations teams and mentor junior consultants where needed.

Required Skills

- Hands-on experience in IAM with strong delivery experience in Okta application onboarding and migration.
- Strong knowledge of Okta SSO integrations and authentication standards including SAML 2.0, OIDC, and OAuth 2.0.
- Experience with MFA implementation, sign-on policies, access policies, and secure authentication design.
- Working knowledge of Active Directory integrations, delegated authentication, and identity lifecycle considerations.
- Experience supporting testing, defect remediation, cutover, and production stabilization for IAM / SSO migrations.
- Strong troubleshooting, analytical, communication, and stakeholder management skills.
- Ability to create high-quality technical and operational documentation.

Good to Have

- Experience with Okta Org2Org, tenant migration, routing rules, or large-scale identity transformation programs.
- Experience with Okta APIs, Okta Workflows, or automation for onboarding and migration activities.
- Exposure to Terraform, GitHub, Jenkins, or related CI/CD tooling.
- Familiarity with Microsoft Entra ID, PingFederate, CyberArk, or SailPoint in hybrid IAM environments.
- Prior experience in banking, financial services, or regulated environments.
- Okta certifications such as Okta Certified Professional or Okta Certified Administrator.

Additional Expectations

- Ability to work independently and collaborate effectively across distributed EY and client teams.
- Strong ownership mindset with focus on quality, accountability, and delivery discipline.
- Comfortable working in client-facing roles, leading discussions, and providing concise status updates.
- Support mentoring, knowledge sharing, and operational handoff activities as part of the EY delivery model.

📌 IAM Engineer - Okta App Migration Consultant - Senior - EY Global Delivery Services (Buenos Aires)
🏢 EY
📍 Buenos Aires