Okta SME + Google Workspace IAM Architect (Contract / Upwork)

Status Pros is seeking a senior-level Okta Subject Matter Expert (SME) with strong Google Workspace identity integration experience to lead a strategic IAM transformation. Our client is undergoing a Google Workspace rebrand and modernization initiative while transitioning to a hybrid workforce model. We need an expert who can architect and optimize identity across Okta and Google Workspace, ensuring seamless access, strong security, and scalable lifecycle management. This is a hands-on + strategic role for a consultant who can drive both technical implementation and identity governance improvements. Scope of Work Identity Architecture & Rebranding Support Lead Okta + Google Workspace identity architecture design Support Google Workspace rebranding changes (domain updates, user identity alignment, email/alias mapping) Ensure identity consistency and minimal disruption during rebrand/migration Align Okta as the primary identity provider (IdP) with Google Workspace SSO, Access & Integrations Implement and optimize SSO (SAML/OIDC) between Okta and Google Workspace Configure Google Workspace as a service provider within Okta Integrate additional SaaS and internal apps into the Okta ecosystem Support Okta Access Gateway (OAG) for legacy apps and Advanced Server Access (ASA) where applicable Lifecycle Management & Automation Design and automate Joiner-Mover-Leaver (JML) processes across Okta and Google Workspace Build automation using Okta Workflows and SCIM provisioning Ensure accurate user provisioning, deprovisioning, and group management Reduce manual admin overhead via workflow-driven automation Security & Compliance Design and enforce MFA and adaptive access policies across Okta and Google Workspace Align identity controls with Zero Trust principles Perform security audits, log monitoring, and policy validation Strengthen account lifecycle controls and access governance Custom Integrations & Scripting Develop API-based integrations between Okta, Google Workspace, and other systems Use PowerShell, Python, or similar scripting to support custom workflows and provisioning Troubleshoot and optimize integration performance Support & Optimization Provide Tier 3 (T3) support for complex SSO, MFA, and provisioning issues Identify and implement continuous improvements across IAM processes Deliver clear documentation and knowledge transfer Required Experience 5+ years of experience with Okta Identity Cloud and IAM Proven expertise in: SSO (SAML 2.0, OIDC/OAuth2) MFA policy design and enforcement User lifecycle management (JML) Hands-on experience integrating Okta with Google Workspace Experience supporting Google Workspace domain changes or rebranding initiatives Strong expertise with Okta Workflows and SCIM provisioning Hands-on experience with: Okta Access Gateway (OAG) Okta Advanced Server Access (ASA) (preferred) Experience building API integrations and custom automation Proficiency in PowerShell, Python, or equivalent scripting Preferred Qualifications Okta Certified Consultant or Administrator Experience with Google Workspace Admin (users, groups, domains, security settings) Familiarity with: Active Directory / Azure AD Hybrid identity environments Security frameworks (SOC 2, ISO, NIST) Ideal Candidate A senior IAM architect who can balance strategy and execution Experience leading identity transformations involving Okta + Google Workspace Strong communicator who can guide stakeholders through rebranding and identity changes Proactive and automation-focused with a security-first mindset Comfortable working independently in a fast-paced, evolving environment Engagement Details Platform: Upwork (Freelance/Contract) Duration: Project-based (with extension potential) Hours: Flexible, milestone-driven Work Environment: Remote, collaborative To Apply, Please Include Summary of your Okta + Google Workspace integration experience Examples of: Rebranding/domain migration or identity consolidation projects Automation using Okta Workflows or APIs Certifications (if applicable) Availability and hourly rate