Senior Identity Engineer - Okta, 12 months Fixed Term Contract, remote across ANZ

Location: Team IT

Team: Country Sydney / Australia

About the Role

Join the team redefining how the world experiences design. Hey, g'day! At Canva, our IT Platform's Workforce Access Management team is radically innovating foundational infrastructure to deliver secure, frictionless experiences for all Canvanauts. We're seeking a Senior Identity Engineer - Okta specialist for a 12-month fixed-term contract, remote across ANZ. In this role, you'll design and implement SSO integrations (SAML, OIDC, OAuth), build SCIM provisioning solutions, troubleshoot complex IAM issues, and accelerate SaaS application onboarding in our enterprise identity ecosystem. You'll collaborate with security and engineering teams to enforce best practices while scripting automations in Python or Workato to keep pace with Canva's explosive growth. You'll thrive if you bring 5+ years in IAM with deep Okta expertise, hands-on SCIM/API integration experience, and a knack for solving thorny authentication challenges independently. Comfortable communicating technical concepts to diverse stakeholders and passionate about secure access management? You'll fit right into our collaborative, design-focused culture where innovation is in our DNA. Experience with Okta FastPass, AMFA, or IGA platforms is a bonus, but your drive to learn and deliver impact matters most. Our Information Technology SuperGroup empowers every Canvanaut through world-class tech, and the Workforce Access Management team powers identity lifecycle, authentication, access control, and user reviews. Work remotely across ANZ, with flexibility to balance empowerment and team goals from our Sydney flagship or wherever inspires you. We celebrate all skills and backgrounds - even if you don't match every bullet, we want to hear from you. Apply now and help shape the secure foundation enabling Canva's creative revolution!

Key Responsibilities

• Design, develop, and implement SSO integrations using Okta across diverse enterprise applications (SAML, OIDC, OAuth)
• Build and maintain SCIM integrations for seamless automated provisioning and deprovisioning of user identities
• Collaborate with security, engineering, and application teams to define and enforce identity architecture best practices
• Lead assessments and integrations of third-party SaaS applications into Canva's identity management framework
• Troubleshoot and resolve complex authentication, authorization, and provisioning issues
• Ensure compliance with internal security policies and external regulatory requirements for identity lifecycle management
• Document system designs, technical flows, and integration configurations for team knowledge sharing
• Script and automate IAM processes using Python, Workato, or similar tools to streamline operations
• Partner with cross-functional teams to deliver secure, frictionless access experiences for Canvanauts
• Continuously innovate Workforce Access Management infrastructure to support Canva's rapid scaling

Required Qualifications

• 5+ years of experience in Identity and Access Management (IAM), with deep expertise in Okta
• Proven experience designing and implementing SSO integrations using SAML, OIDC, and OAuth across enterprise applications
• Hands-on experience building and maintaining SCIM integrations for automated user provisioning and deprovisioning
• Experience configuring Okta in enterprise environments, including troubleshooting and optimizing IAM workflows
• Strong scripting skills (Python, Workato) for automating IAM processes
• Ability to ensure compliance with security policies and regulatory requirements in identity lifecycle management
• Experience documenting system designs, technical flows, and integration configurations

Preferred Qualifications

• Experience with Okta FastPass, AMFA, or other IGA platforms
• Familiarity with JSON, REST APIs, and API-based integrations
• Background in leading assessments and integrations of third-party SaaS applications
• Previous work in fast-scaling tech companies with complex identity ecosystems
• Certifications in Okta, IAM, or related security technologies

Required Skills

• Okta expertise (SSO, SCIM, provisioning)
• SAML, OIDC, OAuth protocols
• SCIM integrations and user lifecycle management
• REST APIs and JSON handling
• Python scripting and automation (Workato)
• Enterprise IAM troubleshooting and optimization
• Security compliance and policy enforcement
• Technical documentation and diagramming
• Cross-functional collaboration
• Clear communication with technical and non-technical stakeholders
• Problem-solving in complex identity ecosystems
• Adaptability in fast-scaling environments
• Innovation in access management infrastructure

Benefits

• Flexible work options - remote across ANZ with choice in work-life balance that empowers you and your team
• 12-month fixed-term contract with competitive compensation tailored to your expertise
• Join a world-class IT team redefining design experiences for millions at Canva's Sydney flagship campus
• Collaborative, innovative culture celebrating diverse skills, backgrounds, and pronouns
• Virtual interview process with reasonable adjustments available
• Opportunity to radically innovate identity infrastructure powering secure access for all Canvanauts
• Part of the Information Technology SuperGroup focused on unlocking every Canvanaut's potential
• Endless learning in a fast-paced, design-forward environment that trusts your expertise

Canva is an equal opportunity employer.