Security Engineer (IAM)

EPAM Systems, Inc.; México; A distancia; MXN 900.000 - 1.200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off

Sick leave

Upskilling and certification courses

LinkedIn Learning access

Descripción de la vacante

EPAM Systems, Inc. is seeking a Security Engineer (IAM) to drive the migration of application identity integrations from Okta to Microsoft Entra ID across a large enterprise portfolio.

You will support migration of 200+ applications using SAML, OIDC, and OAuth2 client-credentials, help move 45,000 users to Okta Verify, and work with cross-functional teams to ensure secure, scalable access during cutover. Strong IAM and integration experience required.

Formación

• 2+ years of hands-on experience with Okta Workforce Identity and Microsoft Entra ID (Azure AD).
• Strong working knowledge of SAML and OpenID Connect (OIDC).
• Experience with Jira and Confluence in large projects.
• Experience working at scale across a large enterprise application portfolio.
• English proficiency at a B2+ level.

Responsabilidades

• Support the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications.
• Assist in migrating approximately 45,000 users from SMS authentication to Okta Verify.
• Troubleshoot SSO/authentication issues during migration cutover.
• Coordinate with application teams on migration scheduling and testing.
• Contribute to migration runbooks and documentation to standardize the process across waves of applications.

Conocimientos

Okta

Microsoft Entra ID

SAML

OIDC

Client credentials

Jira

Confluence

English B2+

Phishing-resistant MFA

IdP migration

Conditional access policy governance

Device assurance policies

FIDO2/WebAuthn

Herramientas

Jira

Confluence

Descripción del empleo

We are seeking a Security Engineer (IAM) to support the technical migration of application integrations from Okta to Microsoft Entra ID, contributing to a large-scale identity transformation initiative across a broad enterprise application portfolio.ResponsibilitiesSupport the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applicationsAssist in the migration of approximately 45,000 users from SMS authentication to Okta VerifyTroubleshoot SSO/authentication issues that arise during migration cutoverCoordinate with individual application teams on migration scheduling and testingContribute to migration runbooks and documentation to standardize the process across waves of applicationsRequirements2+ years of hands-on experience with Okta Workforce Identity and Microsoft Entra ID (Azure AD)Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flowsExperience with Jira and ConfluenceComfortable working at scale across a large application portfolio in a matrixed enterprise environmentProficiency in English at a B2+ levelNice to haveExperience with conditional access policy governance and device assurance policiesFamiliarity with phishing-resistant MFA (FastPass, FIDO2/WebAuthn)Prior experience on an IdP migration project specifically (not just steady-state Okta/Entra administration)We offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.