IAM Migration Architect — Entra ID & Zero Trust Lead

EPAM Systems

México

On-site

MXN 1,500,000 - 2,100,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling and certifications

Global career opportunities

Job summary

EPAM Systems is seeking an IAM Engineering Manager to lead the migration of workforce identity from Okta Workforce Identity to Microsoft Entra ID across a broad application portfolio. You will set technical standards, architect migration patterns, and guide end-to-end execution while collaborating with cross-functional teams globally.

The role emphasizes hands-on engineering leadership, federation expertise, and a focus on secure, scalable identity solutions.

Qualifications

8+ years of hands-on identity engineering experience with production design.
Proven IdP migration experience moving applications between identity platforms at enterprise scale.
Technical leadership experience defining architecture, standards, and escalation paths for complex workstreams.
Large-scale project experience sequencing and executing migrations across many applications and stakeholders.
Advanced Microsoft Entra ID skills including authentication, federation, and conditional access design.
Advanced Okta Workforce Identity skills including policy models, factors, and federation configurations.
Strong SAML expertise including federation setup and claims or attribute mapping.
Strong OpenID Connect skills including token, scope, and claims configuration.
Strong documentation skills using Atlassian Confluence for decisions, runbooks, and reference designs.
Strong delivery skills using Atlassian Jira to track work and manage migration backlogs.
Strong troubleshooting skills for federation, token issuance, and authentication failures.
Upper-Intermediate English proficiency (B2) for clear technical communication with stakeholders.

Responsibilities

Own the migration architecture and technical strategy for transitioning identity provider capabilities from Okta to Microsoft Entra ID.
Define migration patterns, sequencing, and technical standards for re-platforming application integrations to Entra ID.
Design and validate SAML and OpenID Connect configurations including claims mapping and policy equivalency.
Lead technical decisions to ensure conditional access and authentication controls meet phishing-resistant and Zero Trust goals.
Serve as the technical escalation point for complex application migration issues and non-standard federation cases.
Execute or review high-risk migrations including service-to-service authentication and client-credentials flows.
Build and maintain runbooks, reference architectures, and reusable configuration templates to accelerate delivery.
Validate identity lifecycle behavior, provisioning expectations, and access policy parity before and after cutovers.
Troubleshoot and resolve defects related to federation, token issuance, claims, and authentication failures during migration waves.
Partner with the technical project manager to provide technical scoping, sequencing, and risk inputs without owning program management deliverables.
Document technical decisions and configurations in Confluence and track engineering work in Jira.
Coordinate with compliance and audit stakeholders when migration timing impacts control testing windows.