Security Engineer (IAM)

EPAM Systems Inc; United States; On-site; USD 120,000 - 150,000; Full time

Job summary

EPAM Systems is seeking a Security Engineer (IAM) to lead and support the migration of application integrations from Okta to Microsoft Entra ID, across a broad enterprise portfolio of about 200 applications.

In this role, you will help migrate ~45,000 users from SMS to Okta Verify, troubleshoot SSO issues, and collaborate with application teams to schedule and test migrations, contributing to standardized runbooks and documentation.

Qualifications

• 2+ years of hands-on experience with Okta Workforce Identity and Microsoft Entra ID (Azure AD).
• Strong knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows.
• Experience with Jira and Confluence.
• Experience at scale across a large enterprise application portfolio.
• English proficiency at a B2+ level.
• Nice to have Experience with conditional access policy governance and device assurance policies.
• Familiarity with phishing-resistant MFA (FastPass, FIDO2/WebAuthn).
• Prior experience on an IdP migration project specifically (not just steady-state Okta/Entra administration).

Responsibilities

• Support the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
• Assist in the migration of approximately 45,000 users from SMS authentication to Okta Verify
• Troubleshoot SSO/authentication issues that arise during migration cutover
• Coordinate with individual application teams on migration scheduling and testing
• Contribute to migration runbooks and documentation to standardize the process across waves of applications

Skills

Okta Workforce Identity

Microsoft Entra ID

SAML

OIDC

Jira

Confluence

English (B2+)

MFA (phishing-resistant)

IdP migration

Tools

Jira

Confluence

Job description

We are seeking a Security Engineer (IAM) to support the technical migration of application integrations from Okta to Microsoft Entra ID, contributing to a large-scale identity transformation initiative across a broad enterprise application portfolio.

Responsibilities

• Support the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
• Assist in the migration of approximately 45,000 users from SMS authentication to Okta Verify
• Troubleshoot SSO/authentication issues that arise during migration cutover
• Coordinate with individual application teams on migration scheduling and testing
• Contribute to migration runbooks and documentation to standardize the process across waves of applications

Requirements

• 2+ years of hands-on experience with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
• Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
• Experience with Jira and Confluence
• Comfortable working at scale across a large application portfolio in a matrixed enterprise environment
• Proficiency in English at a B2+ level
• Nice to have Experience with conditional access policy governance and device assurance policies
• Familiarity with phishing-resistant MFA (FastPass, FIDO2/WebAuthn)
• Prior experience on an IdP migration project specifically (not just steady-state Okta/Entra administration)