Chief IAM Architect: Okta to Entra ID Migration

EPAM Systems; Colombia; On-site; COP 180,000,000 - 300,000,000; Full time

Benefits offered by this job

Unlimited learning platforms

Comprehensive health plan for you and

Vision health stipend up to COP 200,00

Life insurance with MetLife

Medical leave coverage 90 days

Career growth opportunities

Stock purchase plan

Referral/Interview opportunities

Global EPAM community

Job summary

EPAM Systems is seeking a Chief IAM Engineer in Colombia to lead the migration of workforce identity from Okta to Microsoft Entra ID. You will set standards, guide architecture decisions, and partner with delivery and governance teams to ensure secure outcomes.

You will own the technical design for federation, token flows, and identity lifecycle validation, while mentoring teams and documenting configurations for scalable operations.

Qualifications

• 7+ years hands-on identity engineering with Okta Workforce Identity and Microsoft Entra ID.
• Proven leadership owning architecture decisions and engineering standards.
• Large-scale IdP migration experience across many applications.
• Advanced SAML expertise including federation setup and mapping.
• Advanced OpenID Connect expertise including token design and troubleshooting.
• Strong documentation skills using Confluence and Jira.
• English proficiency Upper-Intermediate (B2).

Responsibilities

• Own the technical architecture and migration strategy for Okta to Entra ID.
• Define migration patterns, sequencing, and standards for transitioning apps.
• Design and validate federation configurations, claims mapping, and access parity.
• Lead design for retirement of Okta SMS and transition to Okta Verify.
• Serve as escalation point for complex onboarding and migration issues.
• Execute or review high-complexity migrations, including non-standard flows.
• Build migration runbooks, reference architectures, and templates.
• Validate identity lifecycle, provisioning, and conditional access post-cutover.
• Troubleshoot federation, token issuance, and authentication failures.
• Document decisions in Confluence; track work in Jira.

Skills

Identity engineering

Architecture leadership

Okta

Entra ID

SAML

OpenID Connect

Confluence

Jira

English B2

Communication

Tools

Confluence

Jira

Job description

EPAM Systems is seeking a Chief IAM Engineer in Colombia to lead the migration of workforce identity from Okta to Microsoft Entra ID. You will set standards, guide architecture decisions, and partner with delivery and governance teams to ensure secure outcomes.

You will own the technical design for federation, token flows, and identity lifecycle validation, while mentoring teams and documenting configurations for scalable operations.