Senior Identity Engineer

Join the Kreitech Team!We're looking for a Senior Identity Engineer — Okta to Microsoft Entra Migration to lead a large-scale identity transformation project for one of our clients. If you're an expert in Identity & Access Management, have hands-on experience migrating from Okta to Microsoft Entra ID, and enjoy solving complex enterprise challenges, we'd love to hear from you! 🚀About the ProjectYou will technically lead the client's identity migration from Okta to Microsoft Entra ID (formerly Azure AD). The client currently operates approximately 110 applications in Okta, including SAML, JIT, SCIM integrations, bookmarks, and legacy applications. A critical Workday integration serves as the authoritative source for user data, including titles, managers, and departments.The primary challenge is ensuring seamless provisioning and deprovisioning throughout the migration while minimizing operational risk. The project begins with a 27-user pilot from a recently acquired company before scaling across the organization.What You'll Do✅ Design and execute the Okta-to-Entra ID migration architecture, replacing the existing Workday → Okta provisioning flow with Workday → Entra ID.✅ Configure the staged pilot environment, enabling Microsoft Entra authentication for Microsoft 365, Slack, and Zoom.✅ Build a complete application inventory by classifying approximately 110 applications based on integration type (SAML, JIT, SCIM) and migration risk.✅ Define the migration strategy and cutover order, starting with lower-risk applications before moving to business-critical systems.✅ Implement automated provisioning and deprovisioning in Microsoft Entra ID using Workday as the authoritative identity source.✅ Coordinate temporary, application-scoped administrative access during migration and testing while maintaining complete audit trails.✅ Document migration activities and create reusable operational runbooks.What We're Looking For✅ 7–10 years of experience in Identity & Access Management (IAM).✅ Proven hands-on experience migrating Workday → Microsoft Entra ID, including provisioning, attribute mapping, and writeback. This is the primary requirement for the role.✅ Deep expertise with Okta, including:Universal DirectoryWorkflowsLifecycle ManagementOkta API✅ Deep expertise with Microsoft Entra ID, including:Conditional AccessEntra ConnectEnterprise ApplicationsApp RegistrationsProvisioning Service✅ Strong experience with SAML 2.0, OpenID Connect (OIDC), SCIM 2.0, and Just-In-Time (JIT) provisioning.✅ Experience developing automation using PowerShell and/or Python.✅ Experience consuming APIs, including Microsoft Graph and Okta APIs.✅ Experience managing audit trails and temporary privileged access.Nice to Have⭐ Microsoft SC-300 certification.⭐ Okta Certified Professional or Okta Certified Administrator.⭐ Experience supporting M&A IT integration projects.⭐ Familiarity with Workday native connectors for HR-driven provisioning.What We Value🚀 Ownership – You take responsibility for technical decisions, proactively solve problems, and drive initiatives to completion.💬 Communication – You communicate clearly with both technical and non-technical stakeholders and provide structured, transparent project updates.Why join Kreitech?💻 Remote work – work from anywhere!😎 Flexible schedule – work-life balance is key.🚀 Continuous learning opportunities – stay at the cutting edge.🍝 Friday lunches – in-office perks!💵 Salary in USD – enjoy competitive compensation.Ready to apply?Apply here:https://airtable.com/appkPBsD5JS0Tp5wx/pagi7lO7hibX0U4bN?prefill_Position=Senior%20Identity%20Engineer%20%E2%80%94%20Okta%20to%20Microsoft%20Entra%20Migration