ppMorningstar is a leading integral provider of independent investment insights, serving both individual and institutional investors across public and private markets. Our offerings include a wide range of data, research, and investment management services, with $300+ billion in assets under management. Operating in 32 countries, Morningstar supports financial advisors, asset managers, retirement plan providers, and more with comprehensive investment solutions. /p h3The Role /h3 pThe Lead IAM Engineer working in the IAM team is responsible for enterprise-wide identity and access management across both Microsoft and Okta platforms. This highly visible role partners closely with teams across the organization, requiring a proactive, innovative mindset and a willingness to think beyond conventional approaches. Operating within an Agile environment, the team moves at pace to adapt to evolving business needs. Our technologists bring a diverse range of expertise and share a commitment to treating technology as a craft, with a strong focus on delivering high-quality, customer‑centric outcomes. The team underpins critical business services, enabling key functions across the organization to deliver seamless and exceptional user experiences. /p h3Responsibilities /h3 ul liLead, mentor, and develop a team of IAM Engineers, fostering a culture of technical excellence, collaboration, and continuous improvement. /li liDefine engineering standards, best practices, and technical direction across the IAM platform. /li liProvide technical leadership through architecture reviews, design discussions, and coaching. /li liDrive project planning, prioritisation, and team capacity planning to ensure successful delivery.



/li liContribute to the long‑term IAM strategy and technology roadmap. /li liDesign, build, and evolve enterprise Identity and Access Management solutions using Okta and Microsoft Entra ID. /li liEngineer and automate Joiner, Mover, Leaver (JML) lifecycle processes using Okta Workflows. /li liDesign and implement secure Single Sign-On (SSO), Multi‑Factor Authentication (MFA), and identity governance solutions. /li liIntegrate enterprise applications using SAML, OAuth, OpenID Connect (OIDC), SCIM, and other modern authentication standards. /li liEngineer and maintain hybrid identity services across Active Directory and Microsoft Entra ID. /li liDevelop PowerShell automation to improve provisioning, administration, and operational efficiency. /li liOwn the health, scalability, resilience, and security of the enterprise identity platform. /li liLead the planning, design, and implementation of IAM projects and platform enhancements. /li liProduce and maintain technical documentation, architecture diagrams, runbooks, and engineering standards. /li liProvide technical guidance during major incidents and act as the escalation point for complex identity‑related issues. /li liCollaborate with Security, Infrastructure, Cloud, and Application teams to deliver secure identity solutions. /li liEvaluate emerging identity technologies and recommend improvements that enhance security, automation, and user experience.



/li /ul h3Requirements /h3 ul liBachelor's degree in Computer Science, Information Technology, or a related discipline (or equivalent practical experience). /li liExperience leading or mentoring engineering teams in an enterprise technology environment. /li liStrong hands‑on experience engineering enterprise Identity and Access Management solutions. /li li3+ years' experience with Okta Single Sign-On (SSO) and Lifecycle Management. /li li3+ years' experience with Okta Identity Governance (OIG). /li li3+ years' experience designing and building solutions using Okta Workflows. /li li5+ years' experience working with Active Directory in complex enterprise environments. /li liStrong knowledge of Active Directory Group Policy and hybrid identity architectures. /li liExperience with Microsoft Entra ID (Azure Active Directory). /li liExperience with Azure Application Proxy or similar application proxy technologies. /li liStrong PowerShell scripting skills with a focus on automation. /li liExperience with Microsoft Certificate Services. /li liExcellent troubleshooting, analytical, and problem‑solving skills. /li liAbility to lead technical initiatives while remaining hands‑on with engineering work. /li liExcellent communication and stakeholder management skills. Self‑motivated with the ability to work autonomously in a fast‑moving environment. /li liServiceNow /li liSplunk /li liBasic knowledge of System for Cross‑domain Identity Management /li /ul pReady to Shape the Future? At Morningstar, every hire we make strengthens our mission to empower investor success. Apply now and help shape the future of investing with us. /p /p #J-18808-Ljbffr

📌 Lead IAM Engineer (Madrid)
🏢 Morningstar
📍 Madrid