Senior Security Engineer (IAM)

EPAM Systems Inc; United States; On-site; USD 130,000 - 170,000; Full time

Job summary

EPAM Systems seeks a Senior Security Engineer (IAM) to move application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program. You will partner with app owners to plan cutovers, resolve authentication issues, and keep migrations aligned with runbooks and documentation.

Responsibilities include migrating across ~200 applications, moving ~45,000 users to Okta Verify, diagnosing cutover issues, coordinating schedules, and creating standardized migration

Qualifications

• Hands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD).
• Strong knowledge of SAML and OpenID Connect (OIDC), including client-credentials flows.
• Experience using Jira and Confluence for tracking work and documentation.
• Ability to operate at scale across a large enterprise in a matrixed environment.

Responsibilities

• Deliver the migration of application SSO integrations from Okta to Entra ID across ~200 apps.
• Migrate ~45,000 users from SMS to Okta Verify.
• Diagnose and resolve SSO/authentication issues during cutover.
• Coordinate migration scheduling with individual app teams and testing.
• Develop runbooks and documentation to standardize multi-wave migrations.

Skills

Okta Workforce Identity

Microsoft Entra ID (Azure AD)

SAML

OIDC

Phishing-resistant MFA (FastPass/WebA​

English proficiency (B2+)

Tools

Jira

Confluence

Job description

We are looking for a Senior Security Engineer (IAM) to help move application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program. You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations consistent with clear runbooks and documentation.

Responsibilities

• Deliver the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
• Help migrate approximately 45,000 users from SMS authentication to Okta Verify
• Diagnose and resolve SSO/authentication issues encountered during migration cutover
• Coordinate with individual application teams to align on migration scheduling and testing
• Develop migration runbooks and documentation to standardize execution across multiple waves of applications

Requirements

• Hands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
• Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
• Practical experience using Jira and Confluence for tracking work and maintaining documentation
• Comfort working at scale across a large application portfolio in a matrixed enterprise environment
• Proficiency in English at a B2+ level
• Nice to have Background with conditional access policy governance and device assurance policies
• Familiarity with phishing-resistant MFA approaches such as FastPass and FIDO2/WebAuthn
• Previous delivery experience on an IdP migration project specifically (beyond steady-state Okta/Entra administration)