Job description
Job Description
Join the team redefining how the world experiences design.
Hey, g’day, mabuhay, kia ora, 你好, hallo, vítejte!
Thanks for stopping by. We know job hunting can be a little time consuming and you’re probably keen to find out what’s on offer, so we’ll get straight to the point.
Where and how you can work
Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work, we trust our Canvanauts to choose the balance that empowers them and their team to achieve their goals.
What you’d be doing in this role
As Canva scales change continues to be part of our DNA. But we like to think that’s all part of the fun. So this will give you the flavour of the type of things you’ll be working on when you start, but this will likely evolve.
Design, develop, and implement SSO integrations using Okta across a wide range of enterprise applications (SAML, OIDC, OAuth).
Build and maintain SCIM integrations for automated provisioning/deprovisioning of user identities.
Collaborate with security and application teams to define and enforce identity architecture best practices.
Lead the assessment and integration of third-party SaaS applications into the existing identity management framework.
Troubleshoot and resolve complex authentication, authorization, and provisioning issues.
Ensure compliance with internal security policies and external regulatory requirements related to identity lifecycle management.
Document system designs, technical flows, and integration configurations.
You’re probably a match if
You bring 5+ years of experience in IAM, especially with Okta, and you’re confident working with SSO protocols like SAML, OAuth, and OpenID Connect
You’ve built and maintained SCIM and API-based integrations, and you’re hands on with tools like JSON and REST
You’ve configured Okta in enterprise settings and can independently troubleshoot and optimise IAM workflows
You collaborate well with others and communicate technical ideas clearly, whether you’re speaking with engineers or non-technical stakeholders
You’re comfortable scripting (Python, Workato) to streamline IAM processes
You’ve used tools like Okta FastPass or AMFA, or you’re keen to learn more about IGA platforms - Not required, though experience here would be a great advantage.
If you’re a highly motivated Senior Identity Engineer with a passion for Access Management, we’d love to hear from you! Apply today for this exciting opportunity.
About the group
The Information Technology SuperGroup’s vision is to improve the potential of every Canvanaut through world-class technology and service. The SuperGroup consists of Business Platform, Technology Experience and IT Platform.
The Workforce Access Management team, is a pivotal team within the IT Platform Group.
About the team
The Workforce Access Management team aims to radically innovate the foundational infrastructure of our Access Management technology to deliver a secure and frictionless experience for all employees.
This infrastructure powers Identity Lifecycle Management, SaaS onboarding & offboarding, Authentication, Access Control and Authorisation, User Access Reviews & Access Requests.
We’re looking for someone to help continue our investment accelerate our vendor onboarding
About the Role
We are seeking a highly skilled Senior Identity Engineer with deep expertise in Okta, Single Sign-On (SSO), and SCIM (System for Cross-domain Identity Management) integrations. This contract role is ideal for a self-driven expert who can independently solve complex identity challenges, ensure seamless identity federation and provisioning across enterprise systems.
Other stuff to know
We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.
We celebrate all types of skills and backgrounds at Canva so even if you don’t feel like your skills quite match what’s listed above - we still want to hear from you!
Please note that interviews are conducted virtually.
