Note: Fidelity will not provide immigration sponsorship for this position.
Position Description:
Provides secure identity management services via Microsoft Entra ID (formerly Azure Active Directory) and Active Directory Domain Services according to Agile methodologies. Works in a combined engineering/operations DevOps model using toolsets -- Jenkins Core, GitHub, Graph Application Programming Interfaces (APIs), Domain Name System (DNS), DHCP, and Public Key Infrastructure (PKI) in a cloud environment (Microsoft Azure or Amazon Web Services (AWS)). Identifies and addresses security vulnerabilities by implementing solutions that protect the firm from external cyber threats. Uses business knowledge to translate the vision for divisional initiatives into business solutions by developing complex or multiple software applications and conducting studies of alternatives. Analyzes and recommends changes in project development policies, procedures, standards, and strategies to development experts and management.
Primary Responsibilities:
- Crafts and coordinates authentication and authorization solutions in the environment, prioritizing resiliency.
- Identifies anomalies in the enterprise by analyzing identity transactions and creates configuration guides in securing those transactions by enforcing controls.
- Defines and leads enterprise-level systems architecture and strategy.
- Develops and implements scalable infrastructure solutions.
- Establishes observability standards for all supported applications.
- Develops and enhances existing functionalities by supporting highly distributed multi-tiered systems at scale.
- Develops, documents, and revises system design procedures, test procedures, and quality standards.
- Collaborates with developers to test and push codes or packages out to production.
- Advises senior leadership on systems engineering best practices.
- Mentors junior engineers.
- Performs independent and complex technical and functional analysis for multiple divisional initiatives.
- Develops innovative solutions to support evolving infrastructure needs.
Education and Experience:
Bachelor’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and five (5) years of experience as Principal Systems Engineer (or closely related occupation) designing, developing, and supporting Identity and Access Management (IAM) solutions for enterprise cybersecurity using Microsoft Entra ID within a financial services environment.
Or, alternatively, Master’s degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field (or foreign education equivalent) and three (3) years of experience as a Principal Systems Engineer (or closely related occupation) designing, developing, and supporting Identity and Access Management (IAM) solutions for enterprise cybersecurity using Microsoft Entra ID within a financial services environment.
Skills and Knowledge:
Candidate must also possess:
- Demonstrated Expertise (“DE”) deploying security controls to safeguard the enterprise from cyberattacks (using Microsoft Entra Conditional Access Policies, Microsoft Identity Protection, Microsoft Defender for Identity, Entra ID multifactor/biometric authentication, Windows Group Policy, and Microsoft Entra Password Protection); and providing operational support including infrastructure support, cloud enablement, platform engineering, environment management, and incident management.
- DE identifying anomalies in Microsoft Entra ID, active directory test, and production environments, and performing workflow automations, using shell scripting (PowerShell, Kusto Query Language, and Python).
- DE designing and deploying enterprise-grade Hybrid Identity sync engine, using Entra Connect infrastructure following secure deployment practices -- standby server configuration and comprehensive documentation.
- DE setting up proactive monitoring using monitoring tools (System Center Operations Manager (SCOM), Splunk, Grafana, and Azure Monitor).
#PE1M2
#LI-DNI
Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.
Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.
Skills Required
- Bachelor's degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field, plus five years of experience designing, developing, and supporting enterprise IAM solutions using Microsoft Entra ID in financial services
- Alternatively, master's degree in Computer Science, Engineering, Information Technology, Information Systems, or a closely related field, plus three years of relevant experience
- Expertise deploying Microsoft Entra security controls, including Conditional Access Policies, Identity Protection, Defender for Identity, multifactor or biometric authentication, Windows Group Policy, and Entra Password Protection
- Expertise providing infrastructure support, cloud enablement, platform engineering, environment management, and incident management
- Expertise identifying anomalies and automating workflows using PowerShell, Kusto Query Language, and Python
- Expertise designing and deploying enterprise hybrid identity synchronization using Entra Connect, including standby server configuration and documentation
- Expertise implementing proactive monitoring with SCOM, Splunk, Grafana, and Azure Monitor
Fidelity Investments Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Fidelity Investments and has not been reviewed or approved by Fidelity Investments.
-
Strong & Reliable Incentives — Bonuses, commissions, and profit-sharing are presented as generous and meaningful components of total compensation, with certain roles achieving high total earnings through multiple pay streams. Variable pay is consistently framed as a positive contributor beyond base salary.
-
Retirement Support — A 401(k) match up to 7% alongside additional profit-sharing up to 10% materially enhances long-term compensation. These retirement features are highlighted as standout strengths of the overall package.
-
Parental & Family Support — Generous paid parental leave (16 weeks maternity, 12 weeks parental), backup dependent care, and adoption assistance provide robust family support. Hybrid work and caregiving resources further ease family responsibilities.
Fidelity Investments Insights
What We Do
At Fidelity, our goal is to make financial expertise broadly accessible and effective in helping people live the lives they want. We do this by focusing on a diverse set of customers: - from 23 million people investing their life savings, to 20,000 businesses managing their employee benefits to 10,000 advisors needing innovative technology to invest their clients’ money. We offer investment management, retirement planning, portfolio guidance, brokerage, and many other financial products. Privately held for nearly 70 years, we’ve always believed by providing investors with access to the information and expertise, we can help them achieve better results. That’s been our approach- innovative yet personal, compassionate yet responsible, grounded by a tireless work ethic—it is the heart of the Fidelity way.
