Security Engineer (IAM)

EPAM Systems, Inc.; United States; Remote; USD 110,000 - 165,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Career development & LinkedIn Learning

Global team collaboration

Job summary

EPAM Systems, Inc. seeks a Security Engineer (IAM) to support the migration of applications from Okta to Microsoft Entra ID across a broad portfolio, focusing on SAML and OIDC workflows and scalable authentication strategies.

You will collaborate with multiple application teams, troubleshoot cutover SSO issues, and contribute to runbooks and documentation. A 2+ year background in Identity services and hands-on experience with Okta and Entra ID are required in a global enterprise environment.

Qualifications

• 2+ years with Okta Workforce Identity and Entra ID (Azure AD).
• Strong knowledge of SAML and OIDC.
• Experience migrating apps in a large enterprise.
• Familiar with Jira/Confluence workflows.
• Proficient English communication (B2+).
• Prior IdP migration project experience.

Responsibilities

• Support migration of application integrations (SAML, OIDC, OAuth2) from Okta to Microsoft Entra ID across a large portfolio.
• Coordinate with app teams on migration scheduling and testing.
• Troubleshoot SSO/authentication issues during cutover.
• Contribute to migration runbooks and standardized documentation.

Skills

Okta Workforce Identity

Microsoft Entra ID

SAML & OIDC

Enterprise-scale deployment

Jira & Confluence

English (B2+)

Migration project experience

Tools

Jira

Confluence

Job description

We are seeking a Security Engineer (IAM) to support the technical migration of application integrations from Okta to Microsoft Entra ID, contributing to a large-scale identity transformation initiative across a broad enterprise application portfolio.ResponsibilitiesSupport the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applicationsAssist in the migration of approximately 45,000 users from SMS authentication to Okta VerifyTroubleshoot SSO/authentication issues that arise during migration cutoverCoordinate with individual application teams on migration scheduling and testingContribute to migration runbooks and documentation to standardize the process across waves of applicationsRequirements2+ years of hands-on experience with Okta Workforce Identity and Microsoft Entra ID (Azure AD)Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flowsExperience with Jira and ConfluenceComfortable working at scale across a large application portfolio in a matrixed enterprise environmentProficiency in English at a B2+ levelNice to haveExperience with conditional access policy governance and device assurance policiesFamiliarity with phishing-resistant MFA (FastPass, FIDO2/WebAuthn)Prior experience on an IdP migration project specifically (not just steady-state Okta/Entra administration)We offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedIn