Senior IAM Engineer

About Morningstar

Morningstar is a leading global provider of independent investment insights, serving both individual and institutional investors across public and private markets. Our offerings include a wide range of data, research, and investment management services, with $300+ billion in assets under management. Operating in 32 countries, Morningstar supports financial advisors, asset managers, retirement plan providers, and more with comprehensive investment solutions.

The Senior IAM Engineer is responsible for enterprise-wide identity and access management across both Microsoft and Okta platforms. This highly visible role partners closely with teams across the organization, requiring a proactive, innovative mindset and a willingness to think beyond conventional approaches. Operating within an Agile environment, the team moves at pace to adapt to evolving business needs. The team underpins critical business services, enabling key functions across the organization to deliver seamless and exceptional user experiences.

• Okta SSO, OIG and Workflows – joiner, leaver, mover processes for employees.
• Corporate‑wide Active Directory domain management.
• All Azure Active Directory (AAD) modules.
• Plan, develop, and deliver projects.
• Create and update documentation and knowledge articles.
• Provide training and knowledge transfer to engineers and users.
• Act as third‑line support for escalations and issues.
• Respond to incidents and alerts.
• Follow tasks from inception to completion.
• Support Employee Experience initiatives.
• Stay current with cutting‑edge technology.

• Bachelor’s degree in computer science or related field (or equivalent work experience).
• 2+ years of Okta SSO and lifecycle management.
• 2+ years of Okta OIG.
• 2+ years of Okta Workflows.
• 5+ years of relevant experience using Active Directory in a complex environment.
• In‑depth knowledge of Active Directory Group Policies (1+ year experience).
• Entra AD (1+ year experience).
• Experience with application proxies, preferably Azure Proxy.
• Basic Power Shell scripting.
• Working knowledge of Microsoft Certificate Server.
• Strong troubleshooting skills.
• Self‑starter, able to work independently in a fast‑changing environment.

• Service Now experience.
• Splunk knowledge.
• Basic knowledge of System for Cross-domain Identity Management (SCIM).

• Hybrid work environment – four days in‑office each week where applicable.
• Competitive base salary (GBP 59,400.00 – 82,866.66).
• Target bonus of 12.5% of annual base.
• Flexible benefit options that adapt to changing needs.
• Tools and resources to collaborate with global colleagues.

Morningstar is strongly committed to creating and preserving equal opportunity for all employees and applicants. We make all employment decisions—including recruitment, hiring, compensation, training, promotion, transfer, discipline, termination, and other personnel matters—without regard to race, color, ancestry, religion, sex, national origin, age, disability, protected veteran status, marital status, sexual orientation, genetic information, citizenship, gender identity and expression, parental status, or other legally protected characteristics or conduct.