Job Title: IAM Engineer – Okta App Migration Consultant Location: Argentina Experience: at least 2 or 3 years of relevant experience Role Summary The Senior Okta App Migration Consultant will support the US client account within EY’s Cybersecurity / Identity & Access Management practice. This role is responsible for leading application migration and onboarding activities into Okta, supporting secure authentication and federation capabilities, coordinating testing and cutover readiness, and producing high-quality delivery documentation. The role requires strong hands-on Okta experience, client-facing communication skills, and the ability to drive migration activities across multiple stakeholders and environments. Core Responsibilities • Lead application migration and onboarding activities into Okta, including requirement gathering, design validation, implementation, testing, and production support. • Conduct discovery sessions with business and technical stakeholders to understand authentication methods, access requirements, dependencies, and migration constraints. • Configure and support SSO integrations using SAML 2.0, OIDC, and OAuth 2.0 for enterprise applications. • Implement and validate Okta sign-on policies, MFA requirements, user/group mappings, and access flows aligned with client expectations. • Support migration planning, test execution, cutover readiness, defect resolution, and post-go-live stabilization / hypercare. • Coordinate with application owners, infrastructure teams, security teams, and delivery leadership to ensure smooth and timely execution. • Troubleshoot complex authentication, federation, provisioning, and policy-related issues during onboarding and migration. • Prepare and maintain technical documentation including requirement documents, design documents, runbooks, KT materials, and status updates. • Support knowledge transfer to operations teams and mentor junior consultants where needed. Required Skills • Hands-on experience in IAM with strong delivery experience in Okta application onboarding and migration. • Strong knowledge of Okta SSO integrations and authentication standards including SAML 2.0, OIDC, and OAuth 2.0. • Experience with MFA implementation, sign-on policies, access policies, and secure authentication design. • Working knowledge of Active Directory integrations, delegated authentication, and identity lifecycle considerations. • Experience supporting testing, defect remediation, cutover, and production stabilization for IAM / SSO migrations. • Strong troubleshooting, analytical, communication, and stakeholder management skills. • Ability to create high-quality technical and operational documentation. Good to Have • Experience with Okta Org2Org, tenant migration, routing rules, or large-scale identity transformation programs. • Experience with Okta APIs, Okta Workflows, or automation for onboarding and migration activities. • Exposure to Terraform, GitHub, Jenkins, or related CI/CD tooling. • Familiarity with Microsoft Entra ID, PingFederate, CyberArk, or SailPoint in hybrid IAM environments. • Prior experience in banking, financial services, or regulated environments. • Okta certifications such as Okta Certified Professional or Okta Certified Administrator. Additional Expectations • Ability to work independently and collaborate effectively across distributed EY and client teams. • Strong ownership mindset with focus on quality, accountability, and delivery discipline. • Comfortable working in client-facing roles, leading discussions, and providing concise status updates. • Support mentoring, knowledge sharing, and operational handoff activities as part of the EY delivery model.