Senior Identity Engineer - Okta, 12 months Fixed Term Contract, remote across ANZ

Location: Team IT

Team: Country Auckland / New Zealand

About the Role

Join the team redefining how the world experiences design. Hey, g'day, kia ora! At Canva, we're building a design-focused powerhouse that's scaling globally, and our IT Platform team is at the heart of empowering every Canvanaut with secure, frictionless access to creative tools. As a Senior Identity Engineer - Okta on this 12-month fixed-term contract (remote across ANZ), you'll drive innovation in our Workforce Access Management team, accelerating SaaS onboarding and crafting identity infrastructure that powers authentication, access control, and user lifecycle management for our design-loving community. You'll design and implement SSO integrations with Okta across enterprise apps using SAML, OIDC, and OAuth, while building SCIM provisioning for seamless user management. Collaborating with security and app teams, you'll troubleshoot complex issues, ensure regulatory compliance, and document everything to fuel our collaborative culture. In Canva's innovative environment, expect to script automations in Python or Workato, optimize workflows, and lead third-party integrations – all while embracing change as part of our fun, fast-moving DNA. You're a match if you have 5+ years in IAM with Okta mastery, hands-on SCIM/API experience, and a knack for clear communication across teams. Bonus points for IGA tools like FastPass or AMFA. Bring your passion for access management to a team that's radically innovating foundational infrastructure, delivering secure experiences that let Canvanauts focus on creating. We celebrate diverse skills and backgrounds – apply now and help shape the future of design at Canva!

Key Responsibilities

• Design, develop, and implement SSO integrations using Okta across diverse enterprise applications (SAML, OIDC, OAuth)
• Build and maintain SCIM integrations for seamless automated provisioning and deprovisioning of user identities
• Collaborate with security and application teams to define and enforce identity architecture best practices
• Lead assessment and integration of third-party SaaS applications into Canva's identity management framework
• Troubleshoot and resolve complex authentication, authorization, and provisioning issues
• Ensure compliance with internal security policies and external regulatory requirements for identity lifecycle management
• Document system designs, technical flows, and integration configurations for team knowledge sharing
• Script and automate IAM processes using Python or Workato to streamline operations
• Optimize Okta configurations for performance in a high-growth, design-focused environment
• Partner with IT Platform teams to innovate access management infrastructure
• Support vendor onboarding acceleration to enable frictionless employee experiences

Required Qualifications

• 5+ years of experience in Identity and Access Management (IAM), with deep expertise in Okta
• Proven experience designing, developing, and implementing SSO integrations using SAML, OIDC, and OAuth across enterprise applications
• Hands-on experience building and maintaining SCIM integrations for automated user provisioning and deprovisioning
• Experience configuring Okta in enterprise environments, including troubleshooting and optimizing IAM workflows
• Proficiency in scripting languages such as Python or Workato for automating IAM processes
• Strong understanding of REST APIs, JSON, and identity protocols
• Demonstrated ability to collaborate with security, engineering, and application teams
• Experience ensuring compliance with security policies and regulatory requirements in identity management

Preferred Qualifications

• Experience with Okta FastPass, AMFA, or other IGA platforms
• Background in SaaS application onboarding and identity federation at scale
• Familiarity with enterprise access reviews, access requests, and lifecycle management
• Previous work in fast-scaling tech companies with distributed teams
• Knowledge of Canva's design-first culture and collaborative tools

Required Skills

• Okta expertise (SSO, SCIM, provisioning)
• SAML, OIDC, OAuth protocols
• REST APIs and JSON handling
• Python or Workato scripting
• IAM troubleshooting and optimization
• Enterprise identity architecture design
• Compliance and security policy enforcement
• Technical documentation
• Cross-team collaboration
• Clear communication with technical and non-technical stakeholders
• Problem-solving in complex identity environments
• Agile workflows in fast-paced settings
• SaaS integration experience
• Automation mindset
• Adaptability to evolving tech stacks

Benefits

• Flexible work options - remote across ANZ with choice in work-life balance
• 12-month fixed-term contract with potential for extension in a world-class IT team
• Join a design-powered culture that celebrates creativity and innovation
• Collaborative environment with cross-functional teams redefining visual communication
• Virtual interview process with inclusive hiring practices
• Opportunity to impact millions of Canvanauts through secure, seamless access
• Work with cutting-edge identity technologies in a rapidly scaling global company
• Support for diverse backgrounds with reasonable adjustments available

Canva is an equal opportunity employer.