Job Description :

About the Role :

We are hiring a Senior Infrastructure Engineer to manage enterprise Identity & Access Management across Active Directory and Okta. This is a server/infrastructure-focused role (not desktop support) requiring intermediate-level, hands-on expertise in AD administration and Okta administration.

Key Skills at a Glance :

- Active Directory (server/infra-side) : 4+ years

- Okta administration : intermediate level, 2+ years

- Azure AD (Entra ID) : working knowledge, 1-2+ years

- PowerShell scripting : basic to intermediate

- Okta Workflows / OIG : good to have

Key Responsibilities :

- Administer and support enterprise Active Directory infrastructure Domain Controllers, replication, FSMO roles, Group Policies, OUs, and DNS integration.

- Manage Okta as the primary IdP Universal Directory, app integrations (SAML/OIDC), authentication policies, and attribute mapping.

- Understand and troubleshoot Okta attributes and attribute flows between AD/HR sources and downstream applications.

- Handle Joiner-Mover-Leaver (JML) identity lifecycle processes across AD and Okta.

- Support AD-to-Okta sync via Okta AD Agent/LDAP Agent, resolving sync and provisioning issues.

- Assist with Okta Workflows automation for identity processes (added advantage).

- Support Okta Identity Governance (OIG) access requests and access certifications (added advantage).

- Act as escalation point for AD/Okta incidents and access-related issues.

- Maintain documentation, runbooks, and knowledge articles for IAM processes.

- Collaborate with application, security, and infra teams on IAM projects.

- Own end-to-end delivery of assigned IAM initiatives, from planning to rollout.

- Mentor and guide junior engineers on AD/Okta best practices.

- Support audit and compliance requirements - access reviews, evidence gathering, and remediation.

- Participate in on-call/escalation rotation for critical identity infrastructure issues.

Required Skills & Experience :

- 4+ years of experience in IAM Engineering, with strong server-side AD administration (not desktop/helpdesk AD support).

- Intermediate-level, hands-on experience with Okta - Universal Directory, app integrations, authentication policies, attribute mapping.

- Solid understanding of AD Group Policies, OU structure, and directory health/troubleshooting.

- Working knowledge of SSO protocols (SAML, OIDC, LDAP).

- Working knowledge of Azure AD (Entra ID) - user/group management, conditional access basics, and hybrid identity (AD Connect/sync).

- Basic PowerShell scripting for AD/Okta/Azure AD automation.

- Strong analytical and troubleshooting skills.

- Good stakeholder management and communication skills - able to work directly with business and application teams.

- Bachelor's degree in Computer Science, IT, or related field (or equivalent experience).

Good to Have :

- Exposure to Okta Workflows.

- Exposure to Okta Identity Governance (OIG).

- Experience with Azure AD Connect/hybrid identity setups.

- Okta Certified Professional/Administrator certification.

- Experience with ServiceNow or Splunk.

Morningstar is an equal opportunity employer.