Senior IAM Engineer - Entra ID Migration & SSO Lead

EPAM Systems, Inc.; Colombia; A distancia; COP 120.000.000 - 240.000.000; Jornada completa

Descripción de la vacante

EPAM Systems, Inc. is seeking a Senior Security Engineer (IAM) to lead the migration of application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program.

You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations aligned with runbooks and documentation. Responsibilities include migrating ~200 applications with SAML, OIDC, and OAuth2 client-credentials flows; migrating

Formación

• Hands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD).
• Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows.
• Practical experience using Jira and Confluence for tracking work and maintaining documentation.
• Comfort working at scale across a large application portfolio in a matrixed enterprise environment.
• Proficiency in English at a B2+ level.

Responsabilidades

• Migrate application integrations (SAML, OIDC, OAuth2 client-credentials) from Okta to Microsoft Entra ID across ~200 applications.
• Help migrate approximately 45,000 users from SMS authentication to Okta Verify.
• Diagnose and resolve SSO/authentication issues during migration cutover.
• Coordinate with application teams to align migration scheduling and testing.
• Develop migration runbooks and documentation to standardize execution across waves.

Conocimientos

Okta Workforce Identity

Microsoft Entra ID

SAML

OIDC

Client Credentials

Service-to-Service flows

Jira

Confluence

English (B2+)

Herramientas

Jira

Confluence

Descripción del empleo

EPAM Systems, Inc. is seeking a Senior Security Engineer (IAM) to lead the migration of application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program.

You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations aligned with runbooks and documentation. Responsibilities include migrating ~200 applications with SAML, OIDC, and OAuth2 client-credentials flows; migrating