About Morningstar
Morningstar is a leading global provider of independent investment insights, serving both individual and institutional investors across public and private markets. Our offerings include a wide range of data, research, and investment management services, with $300+ billion in assets under management. Operating in 32 countries, Morningstar supports financial advisors, asset managers, retirement plan providers, and more with comprehensive investment solutions.
The Role
We're looking for a Senior IAM Engineer to own and evolve our enterprise identity platform across Okta and Microsoft Entra ID. This highly visible role partners closely with teams across the organization, requiring a proactive, innovative mindset and a willingness to think beyond conventional approaches. Operating within an Agile environment, the team moves at pace to adapt to evolving business needs. Our technologists bring a diverse range of expertise and share a commitment to treating technology as a craft, with a strong focus on delivering high-quality, customer-centric outcomes. The team underpins critical business services, enabling key functions across the organization to deliver seamless and exceptional user experiences.
Responsibilities
- Design, build, and maintain enterprise Identity and Access Management solutions using Okta and Microsoft Entra ID.
- Engineer and automate Joiner, Mover, Leaver (JML) lifecycle processes using Okta Workflows.
- Design and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity governance solutions across enterprise applications.
- Integrate cloud and on-premises applications using SAML, OAuth, OIDC, SCIM, and other modern authentication protocols.
- Develop PowerShell automation to streamline identity provisioning, administration, and operational processes.
- Engineer and maintain hybrid identity services across Active Directory and Microsoft Entra ID.
- Administer and optimize Active Directory, including Group Policy management and enterprise domain services.
- Support Azure Application Proxy and secure remote application access.
- Participate in the design, planning, and delivery of identity-related projects and platform enhancements.
- Produce and maintain technical documentation for identity architecture, integrations, and automation.
- Provide third-line technical support for complex IAM issues and contribute to incident response and root cause analysis.
- Stay current with emerging identity technologies and recommend improvements to the platform.
Required:
- Bachelor's degree in Computer Science or a related discipline (or equivalent practical experience).
- Strong hands-on experience engineering enterprise IAM solutions.
- 2+ years' experience with Okta Single Sign-On (SSO) and Lifecycle Management.
- 2+ years' experience with Okta Identity Governance (OIG).
- 2+ years' experience developing solutions using Okta Workflows.
- 5+ years' experience working with Active Directory in complex enterprise environments.
- Strong knowledge of Active Directory Group Policies (GPO).
- Experience with Microsoft Entra ID (Azure Active Directory).
- Experience with Azure Application Proxy or similar application proxy technologies.
- Strong PowerShell scripting skills with a focus on automation.
- Experience with Microsoft Certificate Services.
- Excellent troubleshooting and problem-solving skills.
- Ability to work independently and thrive in a fast-paced, evolving environment.
Desirable:
- ServiceNow
- Splunk
- Experience with System for Cross-domain Identity Management (SCIM)
- Experience integrating SaaS applications with enterprise identity platforms
- Familiarity with Infrastructure as Code or automation tooling
Ready to Shape the Future? At Morningstar, every hire we make strengthens our mission to empower investor success. Apply now and help shape the future of investing with us.
Base Salary Compensation RangeGBP 59.400,00-82.866,66Bonus Target:
12,5% AnnualWe expect the compensation and target bonus for this role to fall within the stated range. The specific compensation offered will depend on the candidate’s qualifications, experience, and other job-related factors.
Morningstar's hybrid work environment gives you the opportunity to collaborate in-person each week as we've found that we're at our best when we're purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you'll have tools and resources to engage meaningfully with your global colleagues.
301_MstarEurLtd Morningstar Europe Ltd (UK) Legal EntitySkills Required
- Bachelor's degree in Computer Science, Information Technology, or related (or equivalent practical experience)
- Experience leading or mentoring engineering teams in an enterprise technology environment
- Hands-on experience engineering enterprise Identity and Access Management solutions
- 3+ years' experience with Okta Single Sign-On (SSO) and Lifecycle Management
- 3+ years' experience with Okta Identity Governance (OIG)
- 3+ years' experience designing and building solutions using Okta Workflows
- 5+ years' experience working with Active Directory in complex enterprise environments
- Strong knowledge of Active Directory Group Policy and hybrid identity architectures
- Experience with Microsoft Entra ID (Azure Active Directory)
- Experience with Azure Application Proxy or similar application proxy technologies
- Strong PowerShell scripting skills with a focus on automation
- Experience with Microsoft Certificate Services
- Excellent troubleshooting, analytical, and problem-solving skills
- Ability to lead technical initiatives while remaining hands-on with engineering work
- Excellent communication and stakeholder management skills; self-motivated and able to work autonomously
- ServiceNow
- Splunk
- Basic knowledge of System for Cross-domain Identity Management (SCIM)
What the Team is Saying
Morningstar Compensation & Benefits Highlights
-
Leave & Time Off Breadth — Policies include a paid sabbatical every four years and flexible PTO covering vacation, sick, and personal days, alongside paid volunteer time. Feedback suggests these features create meaningful flexibility and rest opportunities beyond standard leave plans.
-
Parental & Family Support — A global minimum of 16 weeks paid parental leave for primary caregivers (up to 8 weeks for secondary) and at least six weeks of paid caregiving leave are publicly stated, with adoption assistance also available. These provisions indicate robust support for families during key life events.
-
Retirement Support — U.S. materials document a 401(k) match of $0.75 per $1 up to 7% of pay and no‑cost access to Morningstar retirement tools. This combination strengthens long‑term savings and planning for employees.
Morningstar Insights
What We Do
We are a global investment research and financial data company with 40-plus offices across North America, Europe, Australia, and Asia. Our products and services are used daily by individual investors, financial advisors, asset managers, retirement plan providers, and institutional investors. We provide data, research, and analysis across managed investment products, publicly listed companies, private capital markets, debt securities, and real-time global market data. The financial system can have real barriers—hidden information, friction that can slow decisions, and forces that can limit transparency and access. We work to remove them, bringing independent research, connected data, and investor-first tools to a system that needs more clarity. The people doing this work span research, technology, design, product, sales, and functional areas. We build many of our products in-house, so the work can connect directly to the tools investors use to make real financial decisions.
Why Work With Us
Imagining big things is in our blood -- it's transformed us from a company with just a few employees in 1984 to a leading independent investment research company with a worldwide presence today. As of April 2020, we acquired Sustainalytics to drive long-term meaningful outcomes for investors in the ESG space. Join us on this exciting journey!
Gallery
Morningstar Teams
Morningstar Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
