We are seeking a Chief IAM Engineer to lead the technical architecture and hands-on execution of a workforce identity platform migration from Okta Workforce Identity to Microsoft Entra ID.
You will set standards, solve complex migration issues, and partner with delivery and governance stakeholders to drive secure outcomes.
Responsibilities Own the technical architecture and migration strategy for moving Okta Workforce Identity capabilities to Microsoft Entra IDDefine migration patterns, sequencing, and technical standards for transitioning a large application portfolio from Okta to Entra IDDesign and validate SAML and Open ID Connect federation configurations, claims mapping, and access policy equivalency Lead technical design for retiring the Okta SMS authentication factor and transitioning users to Okta Verify as an interim step Serve as the technical escalation point for complex application onboarding and migration issues Execute or technically review high-complexity migrations, including non-standard federation and service-to-service flows Build and maintain migration runbooks, reference architectures, and reusable configuration templates Validate identity lifecycle, provisioning, and conditional access parity before and after cutovers Troubleshoot and resolve defects related to federation, token issuance, claims mapping, and authentication failures Partner with the Technical Project Manager on technical scoping, sequencing,



and risk input without owning program deliverables Document technical decisions and configurations in Confluence and track engineering work in Jira Requirements7+ years of hands-on identity engineering experience with Okta Workforce Identity and Microsoft Entra ID in production Proven technical leadership experience owning architecture decisions and setting engineering standards for identity platforms Large-scale Id P migration experience re-platforming SAML and Open ID Connect integrations across many applications Advanced SAML expertise including federation setup, claims/attribute mapping, and troubleshooting Advanced Open ID Connect expertise including token and claims design and troubleshooting Strong documentation skills using Atlassian Confluence and work tracking in Atlassian Jira English proficiency Upper-Intermediate (B2)Strong communication skills explaining technical trade-offs and risks to engineering and non-technical stakeholders Nice to have Agile delivery experience supporting iterative planning and execution Privileged Access Management (PAM) experience understanding identity dependencies Scaled Agile Framework experience working within SAFe cadences We offer Career plan and real growth opportunities Unlimited access to Linked In learning solutions Constant training, mentoring, online corporate courses, e Learning and more English classes with a certified teacher Support for employee's initiatives (Algorithms club, toastmasters, agile club and more)Enjoyable working environment (Gaming room, napping area, amenities, events,



sport teams and more)Versátil work schedule and dress code Collaborate in a multicultural environment and share best practices from around the globe Hired directly by EPAM & 100% under payroll Law benefits (IMSS, INFONAVIT, 25% vacation bonus)Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)13 % employee savings fund, capped to the law limit Grocery coupons30 days December bonus Employee Stock Purchase Plan12 vacations days Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)Monthly non-taxable amount for the electricity and internet bills EPAM is a leading global provider of digital platform engineering and development services.
We are committed to having a positive impact on our customers, our employees, and our communities.
We embrace a dynamic and inclusive culture.
Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow.
No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
By applying to our role, you are agreeing that your personal data may be used as in set out in EPAM ́s Privacy Notice and Policy.
EPAM is an Equal Opportunity Employer.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.
#J-*****-Ljbffr

📌 Chief Iam Engineer (México)
🏢 Epam Systems
📍 México