Senior Security Engineer (IAM)

EPAM Systems, Inc.; Brasil; Teletrabalho; BRL 240 000 - 400 000; Tempo integral

Resumo da oferta

EPAM Systems, Inc. is seeking a Senior Security Engineer (IAM) to drive the migration of application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program.

You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues and keep migrations aligned with runbooks and documentation. Fluency in English is required for global collaboration.

Qualificações

• 3+ years with Okta Workforce Identity and Microsoft Entra ID.
• Strong knowledge of SAML and OpenID Connect (OIDC).
• Experience using Jira and Confluence for tracking work and documentation.
• Experience delivering IdP migrations in large enterprises.
• English proficiency at B2+ level.

Responsabilidades

• Deliver technical migration of app integrations from Okta to Entra ID across ~200 apps.
• Migrate ~45,000 users from SMS to Okta Verify.
• Diagnose and resolve SSO/authentication issues during cutover.
• Coordinate with application teams to align migration scheduling and testing.
• Develop migration runbooks and documentation to standardize execution across waves.

Conhecimentos

Okta Workforce Identity

Microsoft Entra ID

SAML

OIDC

OAuth2

Jira

Confluence

English (B2+)

Large-scale migration

Ferramentas

Jira

Confluence

Azure AD / Entra ID

Okta

Descrição da oferta de emprego

We are looking for a Senior Security Engineer (IAM) to help move application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program. You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations consistent with clear runbooks and documentation.ResponsibilitiesDeliver the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applicationsHelp migrate approximately 45,000 users from SMS authentication to Okta VerifyDiagnose and resolve SSO/authentication issues encountered during migration cutoverCoordinate with individual application teams to align on migration scheduling and testingDevelop migration runbooks and documentation to standardize execution across multiple waves of applicationsRequirementsHands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD)Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flowsPractical experience using Jira and Confluence for tracking work and maintaining documentationComfort working at scale across a large application portfolio in a matrixed enterprise environmentProficiency in English at a B2+ levelNice to haveBackground with conditional access policy governance and device assurance policiesFamiliarity with phishing-resistant MFA approaches such as FastPass and FIDO2/WebAuthnPrevious delivery experience on an IdP migration project specifically (beyond steady-state Okta/Entra administration)We offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.