EPAM is a leading general provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture.

Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Senior Security Engineer (IAM) to help move application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program. You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations consistent with clear runbooks and documentation.

Responsibilities

- Deliver the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
- Help migrate approximately 45,000 users from SMS authentication to Okta Verify
- Diagnose and resolve SSO/authentication issues encountered during migration cutover
- Coordinate with individual application teams to align on migration scheduling and testing
- Develop migration runbooks and documentation to standardize execution across multiple waves of applications

Requirements

- Hands-on experience (3+ years)



with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
- Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
- Practical experience using Jira and Confluence for tracking work and maintaining documentation
- Comfort working at scale across a large application portfolio in a matrixed enterprise environment
- Proficiency in English at a B2+ level

Nice to have

- Background with conditional access policy governance and device assurance policies
- Familiarity with phishing-resistant MFA approaches such as FastPass and FIDO2/WebAuthn
- Previous delivery experience on an IdP migration project specifically (beyond steady-state Okta/Entra administration)

We offer

- International projects with top brands
- Work with global teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Global career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Senior Security Engineer (IAM) (México)
🏢 Epam Systems
📍 México