IT Engineer (Okta)

• 3 months contract
• £350/day Outside IR35
• Remote

Okta Engineer - Contract (Global IAM Migration Project)

Contract: 3 months (strong likelihood of extension)

Rate: £350/day - Outside IR35
Location: Remote (UK)
Start: ASAP

The Role We re looking for an experienced Okta Engineer to join a large-scale identity migration project, moving ~1,000 users globally onto a modernised identity and access management (IAM) platform. you'll be hands-on with Okta configuration, integration, and migration work, while also supporting the wider Microsoft identity estate (Entra ID, Azure AD, Intune). This is a great opportunity for a specialist who wants to work at the sharp end of an enterprise-scale IAM rollout, with autonomy and a clear scope of delivery.

Project Context

• Global migration covering approximately 1,000 users across multiple regions/time zones
• Involves coexistence and cutover planning between existing identity systems and the target Okta/Entra environment
• Requires careful sequencing to minimise disruption to end users, applications, and access during migration waves
• Collaboration with global IT, security, and application owners to validate SSO and provisioning post-migration

Key Responsibilities

• Design, configure, and maintain Okta tenants, including Universal Directory, Lifecycle Management, and Adaptive MFA policies
• Plan and execute user migration waves (bulk provisioning, group/attribute mapping, phased cutover) for a global user base
• Build and troubleshoot SSO integrations using SAML, OIDC, and SCIM across a range of SaaS and on-prem applications
• Develop and maintain Okta Workflows for automated provisioning/deprovisioning and identity life cycle events
• Manage API-based integrations using Oktas Management and Authentication APIs
• Support Entra ID (Azure AD) administration - conditional access policies, app registrations, enterprise applications, and hybrid identity (Azure AD Connect/Entra Connect)
• Contribute to device and endpoint management via Microsoft Intune (MDM/MAM policies, compliance profiles, conditional access integration)
• Support cutover activities, rollback planning, and post-migration validation/testing across regions
• Ensure IAM configurations align with security best practice, least-privilege principles, and compliance requirements
• Produce clear technical documentation for configurations, workflows, migration runbooks, and integration patterns

Tech Stack/Skills Required

Okta
Universal Directory, Lifecycle Management, Okta Workflows, MFA/Adaptive MFA, SAML/OIDC/SCIM, Okta API, Access Gateway (desirable)

Entra ID
Conditional Access, App Registrations, Enterprise Apps, PIM, Identity Protection

Azure AD
Hybrid identity, Azure AD Connect/Entra Connect, directory sync, group/role management

Intune
Device compliance policies, MDM/MAM, conditional access integration, app deployment

Migration
Large-scale user/identity migration planning, bulk provisioning, cutover/rollback strategy

General
Identity federation concepts, REST APIs, Scripting (PowerShell/Python desirable), security/compliance awareness

Candidate Profile

• Proven track record delivering Okta implementations or large-scale migrations (ideally 500+ users) in an enterprise environment
• Experience working on global rollouts, coordinating across regions/time zones
• Solid working knowledge of Microsofts identity stack (Entra ID/Azure AD and Intune)
• Comfortable working independently in a remote-first, contract capacity
• Strong communicator, able to document and explain technical decisions to both technical and non-technical stakeholders
• Okta or Microsoft certifications (eg Okta Certified Professional, SC-300) advantageous but not essential

Contract Details

• Duration: 3 months (extension likely based on project scope)
• Rate: £350/day, Outside IR35
• Working pattern: Fully remote
• Scope: Migration of ~1,000 users globally
• IR35 status: Confirmed outside IR35