Senior Security Engineer (IAM)

We are looking for a Senior Security Engineer (IAM) to help move application SSO integrations from Okta to Microsoft Entra ID as part of a major identity modernization program. You will partner with app owners across a large enterprise portfolio to plan cutovers, resolve authentication issues, and keep migrations consistent with clear runbooks and documentation.

Responsibilities

• Deliver the technical migration of application integrations (SAML, OIDC, and OAuth2 client-credentials flows) from Okta to Microsoft Entra ID across roughly 200 applications
• Help migrate approximately 45,000 users from SMS authentication to Okta Verify
• Diagnose and resolve SSO/authentication issues encountered during migration cutover
• Coordinate with individual application teams to align on migration scheduling and testing
• Develop migration runbooks and documentation to standardize execution across multiple waves of applications

Requirements

• Hands-on experience (3+ years) with Okta Workforce Identity and Microsoft Entra ID (Azure AD)
• Strong working knowledge of SAML and OpenID Connect (OIDC), including client-credentials/service-to-service flows
• Practical experience using Jira and Confluence for tracking work and maintaining documentation
• Comfort working at scale across a large application portfolio in a matrixed enterprise environment
• Proficiency in English at a B2+ level

Nice to have

• Background with conditional access policy governance and device assurance policies
• Familiarity with phishing-resistant MFA approaches such as FastPass and FIDO2/WebAuthn
• Previous delivery experience on an IdP migration project specifically (beyond steady-state Okta/Entra administration)