Senior Identity Engineer - Okta

Job Description

Join the team redefining how the world experiences design.

Hey g'day mabuhay kia ora 你好 hallo vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer so we'll get straight to the point.

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane Perth and Adelaide. But you have choice in where and how you work we trust our Canvanauts to choose the balance that empowers them and their team to achieve their goals.

What you’d be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start but this will likely evolve.

• Design develop and implement SSO integrations using Okta across a wide range of enterprise applications (SAML OIDC OAuth).

• Build and maintain SCIM integrations for automated provisioning/deprovisioning of user identities.

• Collaborate with security and application teams to define and enforce identity architecture best practices.

• Lead the assessment and integration of third-party SaaS applications into the existing identity management framework.

• Troubleshoot and resolve complex authentication authorization and provisioning issues.

• Ensure compliance with internal security policies and external regulatory requirements related to identity lifecycle management.

• Document system designs technical flows and integration configurations.

You're probably a match if

• You bring 5+ years of experience in IAM especially with Okta and you're confident working with SSO protocols like SAML OAuth and OpenID Connect

• You’ve built and maintained SCIM and API-based integrations and you're hands on with tools like JSON and REST

• You’ve configured Okta in enterprise settings and can independently troubleshoot and optimise IAM workflows

• You collaborate well with others and communicate technical ideas clearly whether you're speaking with engineers or non-technical stakeholders

• You’re comfortable scripting (Python Workato) to streamline IAM processes

• You’ve used tools like Okta FastPass or AMFA or you're keen to learn more about IGA platforms - Not required though experience here would be a great advantage.

If you're a highly motivated Senior Identity Engineer with a passion for Access Management we'd love to hear from you! Apply today for this exciting opportunity.

About the group

The Information Technology SuperGroup’s vision is to improve the potential of every Canvanaut through world-class technology and service. The SuperGroup consists of Business Platform Technology Experience and IT Platform.

The Workforce Access Management team is a pivotal team within the IT Platform Group.

About the team

The Workforce Access Management team aims to radically innovate the foundational infrastructure of our Access Management technology to deliver a secure and frictionless experience for all employees.

This infrastructure powers Identity Lifecycle Management SaaS onboarding & offboarding Authentication Access Control and Authorisation User Access Reviews & Access Requests.

We’re looking for someone to help continue our investment accelerate our vendor onboarding

About the Role

We are seeking a highly skilled Senior Identity Engineer with deep expertise in Okta Single Sign-On (SSO) and SCIM (System for Cross-domain Identity Management) integrations. This contract role is ideal for a self-driven expert who can independently solve complex identity challenges ensure seamless identity federation and provisioning across enterprise systems.

Other stuff to know

We make hiring decisions based on your experience skills and passion as well as how you can enhance Canva and our culture. When you apply please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

We celebrate all types of skills and backgrounds at Canva so even if you don’t feel like your skills quite match what’s listed above - we still want to hear from you!

Please note that interviews are conducted virtually.