Chief IAM Engineer

EPAM Systems, Inc.; México; A distancia; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career growth

LinkedIn learning

English classes

Flexible schedule

Gaming room

Descripción de la vacante

EPAM Systems, Inc. is seeking a Chief IAM Engineer to own the architectural migration from Okta Workforce Identity to Microsoft Entra ID across a large application portfolio, setting standards and guiding secure outcomes.

Lead federation design for SAML and OpenID Connect, manage token design and claims mapping, retire Okta MFA steps, and build runbooks with Confluence and Jira. Partner with PMs on scoping and risk, mentor teams, and ensure parity before cutovers.

Formación

• 7+ years of hands-on identity engineering with Okta and Entra in production.
• Proven leadership owning architecture decisions and engineering standards for identity platforms.
• Experience migrating large application portfolios across IdP providers (Okta → Entra).
• Strong SAML expertise including federation setup, claims/mapping, and troubleshooting.
• Strong OpenID Connect expertise including token and claims design.
• Deep knowledge of federation, provisioning, and access policy parity.
• Ability to document decisions and configurations with Confluence and track work in Jira.

Responsabilidades

• Own the migration architecture and sequencing from Okta to Entra ID.
• Design and validate SAML and OpenID Connect federation configurations, claims mapping, and parity.
• Lead technical design for retiring Okta SMS and transitioning users to Okta Verify as interim step.
• Build and maintain migration runbooks, reference architectures, and reusable templates.
• Troubleshoot federation, token issuance, and authentication failures.
• Collaborate with Technical Project Manager on scoping, sequencing, and risk input.

Conocimientos

Okta Workforce Identity

Microsoft Entra ID

Identity architecture

SAML

OpenID Connect

Federation

Token design

Claims mapping

MFA transition

Leadership

Herramientas

Confluence

Jira

Descripción del empleo

We are seeking a Chief IAM Engineer to lead the technical architecture and hands-on execution of a workforce identity platform migration from Okta Workforce Identity to Microsoft Entra ID. You will set standards, solve complex migration issues, and partner with delivery and governance stakeholders to drive secure outcomes.ResponsibilitiesOwn the technical architecture and migration strategy for moving Okta Workforce Identity capabilities to Microsoft Entra IDDefine migration patterns, sequencing, and technical standards for transitioning a large application portfolio from Okta to Entra IDDesign and validate SAML and OpenID Connect federation configurations, claims mapping, and access policy equivalencyLead technical design for retiring the Okta SMS authentication factor and transitioning users to Okta Verify as an interim stepServe as the technical escalation point for complex application onboarding and migration issuesExecute or technically review high-complexity migrations, including non-standard federation and service-to-service flowsBuild and maintain migration runbooks, reference architectures, and reusable configuration templatesValidate identity lifecycle, provisioning, and conditional access parity before and after cutoversTroubleshoot and resolve defects related to federation, token issuance, claims mapping, and authentication failuresPartner with the Technical Project Manager on technical scoping, sequencing, and risk input without owning program deliverablesDocument technical decisions and configurations in Confluence and track engineering work in JiraRequirements7+ years of hands-on identity engineering experience with Okta Workforce Identity and Microsoft Entra ID in productionProven technical leadership experience owning architecture decisions and setting engineering standards for identity platformsLarge-scale IdP migration experience re-platforming SAML and OpenID Connect integrations across many applicationsAdvanced SAML expertise including federation setup, claims/attribute mapping, and troubleshootingAdvanced OpenID Connect expertise including token and claims design and troubleshootingStrong documentation skills using Atlassian Confluence and work tracking in Atlassian JiraEnglish proficiency Upper-Intermediate (B2)Strong communication skills explaining technical trade-offs and risks to engineering and non-technical stakeholdersNice to haveAgile delivery experience supporting iterative planning and executionPrivileged Access Management (PAM) experience understanding identity dependenciesScaled Agile Framework experience working within SAFe cadencesWe offerCareer plan and real growth opportunitiesUnlimited access to LinkedIn learning solutionsConstant training, mentoring, online corporate courses, eLearning and moreEnglish classes with a certified teacherSupport for employee’s initiatives (Algorithms club, toastmasters, agile club and more)Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)Flexible work schedule and dress codeCollaborate in a multicultural environment and share best practices from around the globeHired directly by EPAM & 100% under payrollLaw benefits (IMSS, INFONAVIT, 25% vacation bonus)Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)13 % employee savings fund, capped to the law limitGrocery coupons30 days December bonusEmployee Stock Purchase Plan12 vacations daysOfficial Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)Monthly non-taxable amount for the electricity and internet billsEPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.By applying to our role, you are agreeing that your personal data may be used as in set out in EPAM´s Privacy Notice and Policy.EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.