OKTA Lead – L3/L4 System Administration & Okta Workflows

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.  We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

As a System Administrator at Kyndryl, you’ll solve complex problems and identify potential future issues across the spectrum of platforms and services. You’ll be at the forefront of new technology and modernization, working with some of our biggest clients – which means some of the biggest in the world.

Key Accountabilities

Platform Ownership & Architecture

• Own and govern the global OKTA platform, including architecture, standards, and roadmap
• Define and approve authentication policies, MFA controls, and security designs
• Ensure platform scalability, resilience, and alignment with enterprise security strategy

Operations & Service Leadership (24x7)

• Accountable for 24x7 availability, SLA performance, and service continuity
• Act as final escalation points for critical authentication and access incidents
• Lead P1/P2 major incidents, root cause analysis, and remediation actions
• Define and maintain on-call, escalation, and support readiness models

Security, Risk & Compliance

• Ensure OKTA services meet security, audit, and regulatory requirements
• Partner with SOC, GRC, and Audit teams on risk assessments and compliance activities
• Own remediation plans for identified security gaps or audit findings

Leadership & Stakeholder Engagement

• Provide technical and functional leadership to global IAM teams
• Act as a trusted advisor to senior IT and Security leadership
• Mentor senior engineers and ensure effective knowledge transfer

Skills & Experience

Essential

• 12–15+ years of experience in IAM / Security / System Administration
• 2+ years of hands-on OKTA administration, with strong focus on OKTA
• Proven experience supporting enterprise IAM platforms in 24x7 environments
• Strong expertise in authentication, MFA, and identity federation concepts
• OKTA Workflow management.
• Day-to-day OKTA platform support including policy management, group updates, and rule modifications.
• Expertise in OKTA App integration.
• Handling BAU incident tickets, including analysis, resolution, and coordination.
• Deployment and upgrades of new OKTA agents as required.
• Maintenance and patching of OKTA AD agents, coordination with Kyndryl server teams, monitoring agent health, and remediation of agent disconnects.
• Handling day-to-day BAU service requests related to OKTA and IAM services.
• Managing network zone configurations, including addition and updates of IP whitelisting.
• Regular maintenance and updates of CMDB records, including application details and ownership information.
• Management of OKTA-mastered application lists and approver configurations, with regular CMDB updates.
• Handle OKTA L3 SMEs.
• Understanding the creation of workflows in OKTA.
• Provisioning and management of OKTA administrative access.
• Periodic review and revalidation of OKTA admin access.
• Provisioning and lifecycle management of service accounts.
• Periodic revalidation and certification of service account access.
• Ongoing governance and updates of OKTA-mastered accounts and approver lists within CMDB.
• Hypercare services for new implementations, criteria changes, and upgrades, including issue resolution post-migration.
• Single Sign-On
• Adaptive MFA
• Lifecycle Management
• API Access Management
• Provide performance administration account and service account attestation within the Okta service
• Provide IP address whitelisting management within the Okta product
• Perform patch management within the Okta product
• Provide support for audits including remediation of findings that can be delivered as small changes
• Provide group creation, modification and removal
• Plan and execute software upgrades, including compatibility testing and user migration strategies for new releases
• Support group synchronization

Desirable

• Experience in large, global enterprise environments
• Exposure to Zero Trust and modern identity security frameworks

Your future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.
Required Technical and Professional Expertise

• OKTA professional Certified (Mandatory)
• OKTA admin certified, OKTA Certified Consultant / Architect, Security certifications (CISSP / CISM) – desirable

Preferred Technical and Professional Experience
• Automation experience.
OKTA Workflow developer,

• Microsoft Active Directory and federation services

Being You

The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.

What You Can Expect

Your career with us isn’t just a job—it’s an adventure with purpose.  We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.
From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.
We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.
We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.

Get Referred!

If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.