Senior Security Engineer (IAM)

We are looking for a Senior Security Engineer (IAM) to help move application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program. You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations consistent with clear runbooks and documentation.
Responsibilities
Deliver the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
Help migrate approximately 45,000 users from SMS authentication to Okta Verify
Diagnose and resolve SSO/authentication issues encountered during migration cutover
Coordinate with individual application teams to align on migration scheduling and testing
Develop migration runbooks and documentation to standardize execution across multiple waves of applications
Requirements
Hands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
Practical experience using Jira and Confluence for tracking work and maintaining documentation
Comfort working at scale across a large application portfolio in a matrixed enterprise environment
Proficiency in English at a B2+ level
Nice to have
Background with conditional access policy governance and device assurance policies
Familiarity with phishing-resistant MFA approaches such as FastPass and FIDO2/WebAuthn
Previous delivery experience on an IdP migration project specifically (beyond steady-state Okta/Entra administration)
We offer
International projects with top brands
Work with global teams of highly skilled, diverse peers
Healthcare benefits
Employee financial programs
Paid time off and sick leave
Upskilling, reskilling and certification courses
Unlimited access to the LinkedIn Learning library and 22,000+ courses
Global career opportunities
Volunteer and community involvement opportunities
EPAM Employee Groups
Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn
EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

Work arrangement
Yes