IAM Architect for Google Workspace Rebrand & Okta Modernization

**Job Description** Google Workspace rebrand involving domain changes and a modernization of their identity architecture around Okta. The project is currently in the assessment phase, with a need for a senior IAM lead to drive the strategy and execution. Our client is evolving to a hybrid workforce model and needs a leader who can architect and optimize identity across Okta and Google Workspace, ensuring seamless access and robust security. The current environment involves over 100 applications integrated with Okta, making a phased, risk-averse migration essential. We have already identified the need to treat this as a comprehensive identity dependency review. The successful candidate will build on this foundation, creating a detailed migration plan and leading the implementation. We are looking for a "player-coach"—someone who can define the strategy, architect the solution, and get hands-on with Okta Workflows, SCIM, and API integrations to make it happen. **Key Responsibilities** * **Lead the Identity Architecture:** Design and oversee the Okta + Google Workspace integration, ensuring Okta serves as the primary Identity Provider (IdP). * **Orchestrate a Phased Rebrand:** Develop and execute a phased strategy for the Google Workspace domain migration. This includes dependency mapping, pilot groups, and cutover plans to ensure minimal user disruption. * **Automate Lifecycle Management:** Design and implement automated Joiner-Mover-Leaver (JML) processes using Okta Workflows and SCIM provisioning to reduce manual overhead and improve accuracy. * **Strengthen Security Posture:** Enforce MFA, Zero Trust principles, and adaptive access policies across the Okta and Google Workspace ecosystem. * **Integrate & Automate:** Build custom integrations and automation using Okta APIs, PowerShell, or Python to connect identity with the broader SaaS and internal application landscape. * **Guide Stakeholders:** Act as the technical expert, communicating complex migration and security plans clearly to both technical and non-technical stakeholders. **Candidate Requirements** **Must-Have** * 5+ years of experience with Okta Identity Cloud, including advanced configuration of SSO (SAML/OIDC) and MFA policies. * **Proven experience leading a Google Workspace rebranding or domain migration project** with a complex application landscape (100+ apps) . * Deep hands-on experience with Okta Workflows and SCIM provisioning for automating user lifecycle management. * Proficiency in scripting and automation (PowerShell, Python) and building API integrations. * Experience with Okta Access Gateway (OAG). * Excellent communication and leadership skills to guide a project through a sensitive transformation. **Nice-to-Have** * Okta Certified Consultant or Administrator . * Experience with Okta Advanced Server Access (ASA) . * Familiarity with hybrid identity environments (AD/Azure AD), JumpCloud, and security frameworks (SOC 2, NIST) . **This Role is Ideal For...** A senior architect who is as comfortable defining a long-term IAM strategy as they are creating a complex Okta Workflow. You are proactive, automation-focused, and have a security-first mindset. You are confident in your ability to independently lead a multi-faceted identity project from assessment to execution. **Engagement Details** * **Platform:** Upwork (Freelance/Contract) * **Duration:** Project-based, with strong potential for extension. * **Hours:** Flexible, milestone-driven. * **Work Environment:** Remote, collaborative. * **Rate:** Competitive, based on experience.