Senior Identity Engineer - Okta, 12 months Fixed Term Contract, remote across ANZ

Location: Team IT

Team: Country Melbourne / Australia

About the Role

Join the team redefining how the world experiences design. At Canva, we're not just building tools for creators—we're crafting a secure, seamless foundation that empowers every Canvanaut to innovate without friction. As a Senior Identity Engineer - Okta on this 12-month fixed-term contract (remote across ANZ), you'll dive into the heart of our Workforce Access Management team within the IT Platform Group. Our mission? To radically innovate identity infrastructure that handles lifecycle management, SaaS onboarding/offboarding, authentication, access control, and more—ensuring designers, engineers, and creators stay focused on magic, not access hurdles. You'll design and implement SSO integrations with Okta (SAML, OIDC, OAuth), build SCIM for automated provisioning, and lead SaaS app integrations that scale with Canva's explosive growth. Expect to troubleshoot thorny auth issues, enforce security best practices, and script automations in Python or Workato—all while collaborating with security teams and stakeholders in our collaborative, design-obsessed culture. This role evolves with us, blending deep technical expertise with the fun of empowering a global creative workforce. You're a match if you have 5+ years in IAM with Okta mastery, hands-on SCIM/API experience, and a knack for clear communication across teams. Bonus points for IGA tools like FastPass or AMFA. In Canva's innovative environment—think Sydney flagship campus, Melbourne hub, and flexible remote options—you'll thrive if you're self-driven, passionate about access management, and excited to accelerate our vendor onboarding. We hire for skills, passion, and cultural fit; tell us your pronouns and any adjustments needed. Interviews are virtual—apply now and help secure the future of design!

Key Responsibilities

• Design, develop, and implement SSO integrations using Okta across a wide range of enterprise applications (SAML, OIDC, OAuth)
• Build and maintain SCIM integrations for automated provisioning/deprovisioning of user identities
• Collaborate with security, engineering, and application teams to define and enforce identity architecture best practices
• Lead the assessment and integration of third-party SaaS applications into Canva's identity management framework
• Troubleshoot and resolve complex authentication, authorization, and provisioning issues
• Ensure compliance with internal security policies and external regulatory requirements for identity lifecycle management
• Document system designs, technical flows, and integration configurations for team knowledge sharing
• Script and automate IAM processes using Python or Workato to streamline operations
• Partner with Canva's IT Platform Group to accelerate vendor onboarding and enhance workforce access management
• Contribute to innovative infrastructure that delivers secure, frictionless experiences for Canvanauts
• Optimize IAM workflows to support Canva's rapid scaling and design-focused culture

Required Qualifications

• 5+ years of experience in Identity and Access Management (IAM), with deep expertise in Okta
• Proven experience designing, developing, and implementing SSO integrations using SAML, OIDC, and OAuth across enterprise applications
• Hands-on experience building and maintaining SCIM integrations for automated user provisioning and deprovisioning
• Experience configuring Okta in enterprise environments, including troubleshooting and optimizing IAM workflows
• Proficiency in scripting with Python or Workato to automate IAM processes
• Strong knowledge of REST APIs, JSON, and identity protocols
• Demonstrated ability to ensure compliance with security policies and regulatory requirements in identity management
• Experience documenting system designs, technical flows, and integration configurations

Preferred Qualifications

• Experience with Okta FastPass, AMFA, or other IGA platforms
• Background in integrating third-party SaaS applications into identity management frameworks
• Familiarity with enterprise security collaboration and defining IAM best practices
• Previous work in fast-scaling tech environments similar to Canva
• Exposure to design-focused companies with creative, collaborative cultures

Required Skills

• Okta expertise (SSO, SCIM, provisioning)
• SAML, OIDC, OAuth protocols
• REST APIs and JSON handling
• Python or Workato scripting
• IAM troubleshooting and optimization
• Enterprise identity architecture design
• Security compliance and policy enforcement
• Technical documentation
• Cross-functional collaboration
• Clear communication with technical and non-technical stakeholders
• Problem-solving in complex, scaling environments
• Adaptability to evolving priorities
• Passion for innovative, user-centric solutions
• Team-oriented mindset in creative cultures
• Hands-on integration experience with SaaS apps

Benefits

• Flexible work options: remote across ANZ with hybrid flexibility from Sydney, Melbourne, or other hubs
• 12-month fixed-term contract with potential for impactful contributions to Canva's growth
• Collaborative, design-loving culture that celebrates creativity and innovation
• World-class technology environment within the IT SuperGroup
• Opportunity to work on cutting-edge identity solutions powering thousands of Canvanauts
• Virtual interview process with inclusive hiring focused on skills and passion
• Support for reasonable adjustments and diverse backgrounds
• Part of a team redefining how the world experiences design through secure access
• Exposure to Canva's vibrant, global community of creators and builders

Canva is an equal opportunity employer.