IAM / Okta Analyst – Authorization POC

Location: Remote across Canada — preference for candidates in Quebec

Experience: Senior / hands-on IAM & Okta experience

Duration: Until the end of the year, with potential renewal for several years

Hours: 35 hours/week

About the Role

Our client is a leading insurance organization currently modernizing and expanding its Identity & Access Management capabilities. They are looking for an IAM / Okta Analyst to support the design, implementation, and validation of a Proof of Concept (POC) focused on Okta Authorization .

The organization already uses Okta for both internal employees and external customer portal users . The successful candidate will take ownership of the POC from analysis and configuration through application/API integration and testing, while also providing recommendations for the eventual production implementation.

This is a hands-on prospect for someone who enjoys working across IAM architecture, Okta configuration, OAuth/OIDC integration, security testing, and troubleshooting .

Main Responsibilities

• Assess the existing Okta and IAM environment and identify requirements for the authorization POC.
  
  
  
  
• Define authorization use cases for internal and external users and design appropriate authorization models.
• Configure Okta Authorization Servers, scopes, claims, policies, and access tokens .
• Implement and integrate OAuth 2.0 / OpenID Connect flows with target applications and APIs.
• Develop and execute functional and security test scenarios while troubleshooting integration and configuration issues.
• Document the POC architecture, configuration, results, and recommendations while supporting knowledge transfer and production planning .

Qualifications

• Hands-on experience with Okta / Okta Identity Engine in enterprise environments.
• Strong understanding of IAM, OAuth 2.0, OpenID Connect, JWT, access tokens, scopes, claims, and audiences .
• Proven experience integrating applications and APIs with Identity Providers (IdP) .
• Ability to work across the full lifecycle: analysis, configuration, integration, testing, and troubleshooting .
• Strong documentation, analytical, communication, and problem-solving skills with the ability to work independently.
• Experience with API security, RBAC/ABAC, MFA, FIDO2/WebAuthn/Passkeys , or an Okta certification is considered a strong asset.