Senior IAM Engineer

Do you have a security engineering background and strong knowledge in IAM? Are you an open-minded professional with good English skills? If it sounds like you, this could be the perfect opportunity to join EPAM as a
Senior IAM Engineer
.

We are seeking an IAM consultant with technical skills to support onboarding/migration hundreds of our client's applications to sustainable IAM integration patterns.

This is a hybrid position in Madrid or across Spain, with the capability to come to the client's offices at least once a month (offices are located in Madrid).

Responsibilities

• Support application onboarding to strategic IAM platforms (e.g. Microsoft Entra ID, SailPoint)
• Analyse existing integrations and identify inconsistencies, workarounds, or legacy patterns
• Collaborate with architects, engineers, and application teams to clarify integration requirements
• Help stakeholders understand onboarding expectations and support them through adoption
• Document integration flows, checklists, and reusable guidance
• Track progress and risks using Azure DevOps, Confluence, or internal dashboards
• Contribute to workshops and feedback loops to improve the onboarding experience
• Support the evolution of integration practices aligned with our architecture and security strategy
• Assist in migration away from legacy IAM platforms by identifying and transitioning non-compliant integrations

Requirements

• Scripting and automation experience with Python
• API integration and JSON data handling
• Experience with Cloud (Azure) and DevOps (Azure DevOps pipelines - CI/CD)
• Hands-on experience with OKTA Identity Engine, Authentication and authorization flows (MFA, adaptive auth, policies), IdP configurations and OKTA resources (users, groups, applications), Customization of sign-in experiences and policies
• Experience in OKTA Governance Administration (OIG)
• Strong analytical and troubleshooting skills for identity and access issues
• Experience handling incidents related to authentication, SSO, and provisioning
• Ability to diagnose issues across OKTA integrations, workflows, and APIs
• Familiarity with monitoring, alerting, and incident management tools
• Strong knowledge of identity lifecycle management, and app integrations across cloud and on-prem environments
• Agile team experience using tools such as Azure DevOps
• Clear and structured communication and documentation skills
• Very good communications and team collaboration skills, problem solving skills
• Proficiency in English, both spoken and written

We offer

• Private health insurance
• EPAM Employees Stock Purchase Plan
• 100% paid sick leave
• Referral Program
• Professional certification
• Language courses

EPAM is a leading digital transformation services and product engineering company with 61,700+ EPAMers in 55+ countries and regions. Since 1993, our multidisciplinary teams have been helping make the future real for our clients and communities around the world. In 2018, we opened an office in Spain that quickly grew to over 1,450 EPAMers distributed between the offices in Málaga, Madrid and Cáceres as well as remotely across the country. Here you will collaborate with multinational teams, contribute to numerous innovative projects, and have an opportunity to learn and grow continuously.

• Why Join EPAM
• WORK AND LIFE BALANCE.
  Enjoy more of your personal time with flexible work options, 24 working days of annual leave and paid time off for numerous public holidays.
• CONTINUOUS LEARNING CULTURE.
  Craft your personal Career Development Plan to align with your learning objectives. Take advantage of internal training, mentorship, sponsored certifications and LinkedIn courses.
• CLEAR AND DIFFERENT CAREER PATHS.
  Grow in engineering or managerial direction to become a People Manager, in-depth technical specialist, Solution Architect, or Project/Delivery Manager.
• STRONG PROFESSIONAL COMMUNITY.
  Join a global EPAM community of highly skilled experts and connect with them to solve challenges, exchange ideas, share expertise and make friends.