Lead IAM Engineer

EPAM·Colombia, Mexico·Удалённо·сегодня

We are seeking a hands-on Lead IAM Engineer to develop and drive a large-scale migration from Okta Workforce Identity to Microsoft Entra ID across a complex enterprise application landscape. You will set migration standards, solve the hardest integration challenges, and partner with stakeholders to deliver a secure, reliable transition.

Responsibilities

Own the target architecture and migration strategy to move workforce identity capabilities from Okta to Microsoft Entra ID
Define migration patterns, sequencing, and technical standards for re-platforming SAML and OpenID Connect integrations
Design and validate federation configurations, claims mapping, and policy parity across identity providers
Lead technical approach for retiring legacy SMS authentication and transitioning users to an interim MFA solution
Serve as escalation point for complex application onboarding and migration defects
Execute or review high-risk migrations, including non-standard federation and service-to-service flows
Build runbooks, reference architectures, and reusable configuration templates to accelerate delivery
Validate identity lifecycle, provisioning, and conditional access behavior before and after cutovers
Troubleshoot authentication failures across federation, tokens, and attribute mappings during migration waves
Partner with a technical project manager on scoping, sequencing, and risk inputs without owning program deliverables
Document technical decisions and configurations in Confluence and track work in Jira
Coordinate with compliance stakeholders when migration timing affects audit and control testing windows

Requirements

5+ years of identity engineering experience with production design and troubleshooting
Okta Workforce Identity experience supporting workforce IdP use cases
Microsoft Entra ID experience across authentication and policy design
SAML and OpenID Connect experience for application federation
Technical leadership experience setting standards and reviewing designs
Large-scale migration experience leading IdP re-platforming across many applications
Strong OAuth2 client-credentials knowledge for service-to-service authentication
Solid troubleshooting skills for claims mapping, token issuance, and auth failures
Clear communication skills to explain trade-offs to technical and non-technical partners
Upper-Intermediate English proficiency (B2)
Atlassian Jira proficiency for tracking engineering work
Atlassian Confluence proficiency for documenting decisions and runbooks