Lead IAM Engineer

About the Position

We are seeking a hands-on Lead IAM Engineer to develop and drive a large-scale migration from Okta Workforce Identity to Microsoft Entra ID across a complex enterprise application landscape. You will set migration standards, solve the hardest integration challenges, and partner with stakeholders to deliver a secure, reliable transition.

Responsibilities

• Own the target architecture and migration strategy to move workforce identity capabilities from Okta to Microsoft Entra ID
• Define migration patterns, sequencing, and technical standards for re-platforming SAML and OpenID Connect integrations
• Design and validate federation configurations, claims mapping, and policy parity across identity providers
• Lead technical approach for retiring legacy SMS authentication and transitioning users to an interim MFA solution
• Serve as escalation point for complex application onboarding and migration defects
• Execute or review high-risk migrations, including non-standard federation and service-to-service flows
• Build runbooks, reference architectures, and reusable configuration templates to accelerate delivery
• Validate identity lifecycle, provisioning, and conditional access behavior before and after cutovers
• Troubleshoot authentication failures across federation, tokens, and attribute mappings during migration waves
• Partner with a technical project manager on scoping, sequencing, and risk inputs without owning program deliverables
• Document technical decisions and configurations in Confluence and track work in Jira
• Coordinate with compliance stakeholders when migration timing affects audit and control testing windows

Requirements

• 5+ years of identity engineering experience with production design and troubleshooting
• Okta Workforce Identity experience supporting workforce IdP use cases
• Microsoft Entra ID experience across authentication and policy design
• SAML and OpenID Connect experience for application federation
• Technical leadership experience setting standards and reviewing designs
• Large-scale migration experience leading IdP re-platforming across many applications
• Strong OAuth2 client-credentials knowledge for service-to-service authentication
• Solid troubleshooting skills for claims mapping, token issuance, and auth failures
• Clear communication skills to explain trade-offs to technical and non-technical partners
• Upper-Intermediate English proficiency (B2)
• Atlassian Jira proficiency for tracking engineering work
• Atlassian Confluence proficiency for documenting decisions and runbooks

Nice to Have

• Agile delivery experience in cross-functional engineering teams
• Scaled Agile Framework (SAFe) experience
• Privileged Access Management (PAM) experience in enterprise environments

We Offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

About the Company

[Company description if present]