OKTA L3 Support Lead & SME
Who We Are
Key Accountabilities
- Design, build, and troubleshoot complex Okta Workflows (event‑driven, multi‑step, API‑integration)
•
- Handle changes for APP integrations.
- Lead Okta API‑based integrations and troubleshooting, including rate limiting, error handling, and token flows
- Support scenario‑based change delivery (app onboarding, federation, lifecycle orchestration) end‑to‑end
- Act as client‑facing technical authority, able to articulate design decisions and trade‑offs clearly
- Provide hands‑on technical leadership and advisory input across the Okta platform, workflows, and standards under WPP governance
- Contribute to the design and implementation of authentication policies, MFA controls, and security configurations subject to WPP approval
- Support platform scalability, resilience, and security alignment through execution, operational insight, and remediation activities
Operations & Service Leadership
- Accountable for
24x7 availability, SLA performance, and service continuity
- Act as
final escalation points
for critical authentication and access incidents
- Lead
P1/P2 major incidents
, root cause analysis, and remediation actions
- Define and maintain
Security, Risk & Compliance
- Ensure OKTA services meet
security, audit, and regulatory requirements
- Partner with SOC, GRC, and Audit teams on
risk assessments and compliance activities
- Own remediation plans for identified security gaps or audit findings
Leadership & Stakeholder Engagement
- Provide
technical and functional leadership
to L3 SME and global IAM teams
- Act as a
trusted advisor
to senior IT and Security leadership
- Mentor senior engineers and ensure effective knowledge transfer
Essential
- 12–15+ years of experience in IAM / Security / System Administration, with significant hands‑on identity engineering experience
- 2+ years of hands-on OKTA administration, with strong focus on OKTA
- Proven hands‑on experience designing, building, and maintaining complex Okta Workflows (minimum 12 months)
- Proven experience supporting enterprise IAM platforms within a 24x7 service model
- Strong expertise in authentication, MFA, Single Sign-On, lifecycle management, and identity federation
- Hands‑on Okta API usage and troubleshooting, including token handling, rate limiting, and error resolution
- Expertise in Okta application integrations (SAML, OIDC, SCIM) and lifecycle orchestration, and app onboarding/offboarding
- Provide senior‑level hands‑on support for complex BAU and change activities, including workflow remediation, agent upgrades, audit support, and corrective configuration changes
- Lead P1/P2 incident management, root cause analysis, and remediation
- Act as senior technical escalation and mentor for L3 Okta engineers
- Strong client‑facing communication skills, able to articulate technical decisions and trade‑offs clearly
- Expertise in OKTA App integration and management of OKTA-mastered application lists and approver configurations, with regular CMDB updates
- Lead deployment, maintenance, and upgrades of new OKTA agents, including coordination with infrastructure teams, health monitoring and remediation
- Managing network zone configurations, and IP whitelisting within Okta
- Provisioning and governance of OKTA administrative access, including periodic review and revalidation
- Provisioning and lifecycle governance of service accounts, including certification and periodic revalidation
- Ongoing governance and updates of OKTA-mastered applications, accounts, approvers, and CMDB records
- Deliver hypercare support for new implementations, criteria changes, and upgrades
- Support audits, including evidence collection and execution of approved remediation activities
- Plan and execute Okta platform upgrades, including compatibility testing and migration coordination, and user impact planning
- Plan and execute software upgrades, including compatibility testing and user migration strategies for new releases
- Support group synchronization
One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You’ll also get the chance to share your expertise by recommending modernization options, identifying new business opportunities, and cultivating relationships with other teams and stakeholders. Does the work get challenging at times? Yes! But you’ll collaborate with a diverse group of talented people and gain invaluable management and organizational skills, which will come in handy as you move forward in your career.
Your future at Kyndryl Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.
Who You Are
You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.
Required Technical and Professional Expertise
Desirable
- Experience in large, global enterprise environments
- Exposure to Zero Trust and modern identity security frameworks
Qualifications / Certifications
- OKTA professional Certified, OKTA admin certified (Mandatory)
- OKTA workflows, OKTA Certified Consultant, Security certifications (CISSP / CISM) – desirable
Decision Making & Impact
- Makes high-impact L4 / consultant‑level and operational decisions affecting global access services
- Accountable for service stability, security posture, and risk reduction
- Influences IAM strategy and platform direction at enterprise level
Working Conditions
- 24x7 global support model (rotational on-call)
- Collaboration across APAC, EMEA, and NA/LATAM regions
- Location Bangalore – India.
Being You
What You Can Expect
Get Referred!
Not included in the source posting: what you'll do, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.