EPAM Systems
Senior Security Engineer (IAM)
- Compensation
- Not disclosed
- Location
- Argentina, Brazil, Chile, Colombia, Mexico
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Hands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
- Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
- Practical experience using Jira and Confluence for tracking work and maintaining documentation
- Comfort working at scale across a large application portfolio in a matrixed enterprise environment
- Proficiency in English at a B2+ level
Nice to have
- Background with conditional access policy governance and device assurance policies
- Familiarity with phishing-resistant MFA approaches such as FastPass and FIDO2/WebAuthn
- Previous delivery experience on an IdP migration project specifically (beyond steady-state Okta/Entra administration)
Full description
We are looking for a Senior Security Engineer (IAM) to help move application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program. You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations consistent with clear runbooks and documentation.
Responsibilities
- Deliver the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
- Help migrate approximately 45,000 users from SMS authentication to Okta Verify
- Diagnose and resolve SSO/authentication issues encountered during migration cutover
- Coordinate with individual application teams to align on migration scheduling and testing
- Develop migration runbooks and documentation to standardize execution across multiple waves of applications
Requirements
- Hands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
- Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
- Practical experience using Jira and Confluence for tracking work and maintaining documentation
- Comfort working at scale across a large application portfolio in a matrixed enterprise environment
- Proficiency in English at a B2+ level
Nice to have
- Background with conditional access policy governance and device assurance policies
- Familiarity with phishing-resistant MFA approaches such as FastPass and FIDO2/WebAuthn
- Previous delivery experience on an IdP migration project specifically (beyond steady-state Okta/Entra administration)
Benefits
- International projects with top brands
- Work with global teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Global career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn