Lead IAM Engineer

EPAM Systems, Inc.; Colombia; A distancia; COP 90.000.000 - 150.000.000; Jornada completa

Descripción de la vacante

EPAM Systems, Inc. is seeking a hands-on Lead IAM Engineer to drive a large-scale migration from Okta Workforce Identity to Microsoft Entra ID across a complex enterprise application landscape.

You will set migration standards, solve the hardest integration challenges, and partner with stakeholders to deliver a secure, reliable transition. You will design federation configurations, claims mapping, and policy parity, retire legacy SMS authentication, and guide teams through cutovers while

Formación

• 5+ years of identity engineering experience with production design and troubleshooting.
• Okta Workforce Identity experience supporting workforce IdP use cases.
• Microsoft Entra ID experience across authentication and policy design.
• SAML and OpenID Connect experience for application federation.
• Technical leadership experience setting standards and reviewing designs.
• Large-scale migration experience leading IdP re-platforming.
• Strong OAuth2 client-credentials knowledge for service-to-service authentication.
• Clear communication skills to explain trade-offs to technical and non-technical partners.

Responsabilidades

• Own the target architecture and migration strategy to move workforce identity from Okta to Microsoft Entra ID.
• Define migration patterns, sequencing, and technical standards for re-platforming SAML and OpenID Connect.
• Design and validate federation configurations, claims mapping, and policy parity across identity providers.
• Lead technical approach for retiring legacy SMS authentication and transitioning users to an interim MFA solution.
• Serve as escalation point for complex application onboarding and migration defects.
• Build runbooks, reference architectures, and reusable configuration templates to accelerate delivery.
• Validate identity lifecycle, provisioning, and conditional access behavior before and after cutovers.
• Troubleshoot authentication failures across federation, tokens, and attribute mappings during migration waves.
• Coordinate with compliance stakeholders when migration timing affects audit and control testing windows.

Conocimientos

Identity engineering

Leadership

Troubleshooting

Communication

English (B2)

Herramientas

Jira

Confluence

Okta

Microsoft Entra ID

Descripción del empleo

We are seeking a hands-on Lead IAM Engineer to develop and drive a large-scale migration from Okta Workforce Identity to Microsoft Entra ID across a complex enterprise application landscape. You will set migration standards, solve the hardest integration challenges, and partner with stakeholders to deliver a secure, reliable transition.ResponsibilitiesOwn the target architecture and migration strategy to move workforce identity capabilities from Okta to Microsoft Entra IDDefine migration patterns, sequencing, and technical standards for re-platforming SAML and OpenID Connect integrationsDesign and validate federation configurations, claims mapping, and policy parity across identity providersLead technical approach for retiring legacy SMS authentication and transitioning users to an interim MFA solutionServe as escalation point for complex application onboarding and migration defectsExecute or review high-risk migrations, including non-standard federation and service-to-service flowsBuild runbooks, reference architectures, and reusable configuration templates to accelerate deliveryValidate identity lifecycle, provisioning, and conditional access behavior before and after cutoversTroubleshoot authentication failures across federation, tokens, and attribute mappings during migration wavesPartner with a technical project manager on scoping, sequencing, and risk inputs without owning program deliverablesDocument technical decisions and configurations in Confluence and track work in JiraCoordinate with compliance stakeholders when migration timing affects audit and control testing windowsRequirements5+ years of identity engineering experience with production design and troubleshootingOkta Workforce Identity experience supporting workforce IdP use casesMicrosoft Entra ID experience across authentication and policy designSAML and OpenID Connect experience for application federationTechnical leadership experience setting standards and reviewing designsLarge-scale migration experience leading IdP re-platforming across many applicationsStrong OAuth2 client-credentials knowledge for service-to-service authenticationSolid troubleshooting skills for claims mapping, token issuance, and auth failuresClear communication skills to explain trade-offs to technical and non-technical partnersUpper-Intermediate English proficiency (B2)Atlassian Jira proficiency for tracking engineering workAtlassian Confluence proficiency for documenting decisions and runbooksNice to haveAgile delivery experience in cross-functional engineering teamsScaled Agile Framework (SAFe) experiencePrivileged Access Management (PAM) experience in enterprise environmentsWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.