Security Engineer (IAM)

We are seeking a Security Engineer (IAM) to support the technical migration of application integrations from Okta to Microsoft Entra ID, contributing to a large-scale identity transformation initiative across a broad enterprise application portfolio.

Responsibilities

• Support the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
• Assist in the migration of approximately 45,000 users from SMS authentication to Okta Verify
• Troubleshoot SSO/authentication issues that arise during migration cutover
• Coordinate with individual application teams on migration scheduling and testing
• Contribute to migration runbooks and documentation to standardize the process across waves of applications

Requirements

• 2+ years of hands-on experience with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
• Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
• Experience with Jira and Confluence
• Comfortable working at scale across a large application portfolio in a matrixed enterprise environment
• Proficiency in English at a B2+ level

Nice to have

• Experience with conditional access policy governance and device assurance policies
• Familiarity with phishing-resistant MFA (FastPass, FIDO2/WebAuthn)
• Prior experience on an IdP migration project specifically (not just steady-state Okta/Entra administration)

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.