Senior IAM Engineer

About Morningstar

Morningstar is a leading global provider of independent investment insights, serving both individual and institutional investors across public and private markets. Our offerings include a wide range of data, research, and investment management services, with $300+ billion in assets under management. Operating in 32 countries, Morningstar supports financial advisors, asset managers, retirement plan providers, and more with comprehensive investment solutions.

The Role

The Senior IAM Engineer is responsible for enterprise-wide identity and access management across both Microsoft and Okta platforms. This highly visible role partners closely with teams across the organization, requiring a proactive, innovative mindset and a willingness to think beyond conventional approaches. Operating within an Agile environment, the team moves at pace to adapt to evolving business needs. Our technologists bring a diverse range of expertise and share a commitment to treating technology as a craft, with a strong focus on delivering high-quality, customer-centric outcomes. The team underpins critical business services, enabling key functions across the organization to deliver seamless and exceptional user experiences.

Responsibilities

• Okta SSO, OIG and Workflows
• Joiner, Leaver, Mover processes for employees
• Responsible for Corporate wide Active Directory Domains
• Responsible for all modules of Azure Active Directory (AAD)
• Participation in the planning, development, and delivery of projects.
• Create and update documentation and knowledge articles
• Provide knowledge transfer to engineers and training to users as required as part of deployment.
• Act as third line support for escalations and issues
• Respond to incidents and alerts as requested.
• Follow tasks from inception to completion
• Support Employee Experience initiatives
• Stay knowledgeable with cutting-edge technology

Required:

• Bachelor’s degree in computer science or related field (or equivalent work experience)
• 2+ years of Okta SSO and Lifecycle management
• 2+ years of Okta OIG
• 2+ Years of Okta Workflows
• 5+ years of relevant experience using Active Directory in a complex environment
• In depth knowledge of Active Directory Group Policies
• 1+ years of experience Entra AD
• 1+ years of experience working with application proxies – preferably Azure Proxy
• Strong troubleshooting skills
• Must be a self-starter and able to work alone in a fast-changing environment
• Basic PowerShell scripting is a must
• Working knowledge of Microsoft Certificate Server

Desirable:

• ServiceNow
• Splunk
• Basic knowledge of System for Cross-domain Identity Management

Ready to Shape the Future? At Morningstar, every hire we make strengthens our mission to empower investor success. Apply now and help shape the future of investing with us.

Base Salary Compensation Range

Bonus Target:

We expect the compensation and target bonus for this role to fall within the stated range. The specific compensation offered will depend on the candidate’s qualifications, experience, and other job-related factors.

Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.