Senior IAM Engineer

About the Role The newly formed Identity and Access Management (IAM) team is seeking an ambitious self-starter for the new position based in the Chicago office with the possibility of working remotely. The team member will be responsible for Corporate-wide Identity management that encompasses Microsoft, AWS, Okta and SailPoint. The highly visible team member will work closely with all groups throughout the organization and must think "outside the box". We practice Agile methodologies and move quickly to adapt. Our technologists possess a wide range of skills and knowledge bases, we all view technology as a craft and care deeply about creating positive experiences for our customers. This team performs business-critical services enabling many different components of the business to deliver an amazing experience.
Job Responsibilities

• Responsible for Corporate wide Active Directory Domains and all daily maintenance, support and upgrade
• Responsible for all modules of Azure Active Directory (AAD)
• Support Employee Experience initiatives
• Work with Corporate InfoSec on security concerns
• Follow tasks from inception to completion
• 2nd level support for escalated tickets
• Participation in the planning, development, and delivery of projects.
• Create and update documentation and knowledge articles on corporate Wiki page
• Stay knowledgeable with cutting-edge technology

Qualifications

• Bachelor's Degree in Computer Science or related field (or equivalent work experience)
• 5+ years of relevant experience using Active Directory in a complex environment
• In depth knowledge of Active Directory Group Policies
• 1+ years of experience in a cloud environment - preferably Azure Active Directory (AAD)
• 1+ years of experience working with application proxies - preferably Azure Proxy
• Working knowledge of Okta
• Strong troubleshooting skills
• Must be a self-starter and able to work alone in a fast-changing environment
• Knowledge of OAuth, SAML and LDAP
• Knowledge of Single Sign-On and Federated Authentication
• Knowledge of Microsoft Online Applications
• Basic PowerShell scripting is a must
• Working knowledge of Microsoft Certificate Server
• 24x7 availability

Nice to have

• SailPoint
• Thycotic Secret Server
• ServiceNow
• Microsoft MCSE
• Splunk
• Basic knowledge of System for Cross-domain Identity Management
• Basic knowledge of Lifecycle Management and provisioning

001_MstarInc Morningstar Inc. Legal Entity