Senior IAM Engineer

About Morningstar

Morningstar is a leading global provider of independent investment insights, serving both individual and institutional investors across public and private markets. Our offerings include a wide range of data, research, and investment management services, with $300+ billion in assets under management. Operating in 32 countries, Morningstar supports financial advisors, asset managers, retirement plan providers, and more with comprehensive investment solutions.

The Role

The Senior IAM Engineer is responsible for enterprise-wide identity and access management across both Microsoft and Okta platforms. This highly visible role partners closely with teams across the organization, requiring a proactive, innovative mindset and a willingness to think beyond conventional approaches. Operating within an Agile environment, the team moves at pace to adapt to evolving business needs. The senior IAM engineer underpins critical business services, enabling key functions across the organization to deliver seamless and exceptional user experiences.

Responsibilities

• Okta SSO, OIG and Workflows Joiner, Leaver, Mover processes for employees
• Responsible for Corporate wide Active Directory Domains
• Responsible for all modules of Azure Active Directory (AAD)
• Participation in the planning, development, and delivery of projects.
• Create and update documentation and knowledge articles
• Provide knowledge transfer to engineers and training to users as required as part of deployment.
• Act as third line support for escalations and issues
• Respond to incidents and alerts as requested.
• Follow tasks from inception to completion
• Support Employee Experience initiatives
• Stay knowledgeable with cutting-edge technology

Required

• Bachelor’s degree in computer science or related field (or equivalent work experience)
• 2+ years of Okta SSO and Lifecycle management
• 2+ years of Okta OIG
• 2+ Years of Okta Workflows
• 5+ years of relevant experience using Active Directory in a complex environment
• In depth knowledge of Active Directory Group Policies
• 1+ years of experience Entra AD
• 1+ years of experience working with application proxies – preferably Azure Proxy
• Strong troubleshooting skills
• Must be a self-starter and able to work alone in a fast-changing environment
• Basic PowerShell scripting is a must
• Working knowledge of Microsoft Certificate Server

Desirable

• ServiceNow
• Splunk
• Basic knowledge of System for Cross-domain Identity Management

Compensation

Base Salary Compensation Range GBP 59,400.00-82,866.66. We expect the compensation and target bonus for this role to fall within the stated range. The specific compensation offered will depend on the candidate’s qualifications, experience, and other job-related factors. Bonus Target: 12.5% Annual

Benefits

Morningstar’s hybrid work environment gives you the opportunity to collaborate in‑person each week as we’ve found that we’re at our best when we’re purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.