> Markdown version of [/jobs/ext/1478778-senior-iam-engineer](https://www.wearedevelopers.com/jobs/ext/1478778-senior-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IAM Engineer - **Company:** Morningstar, Inc. - **Location:** London, UK - **Experience:** Expert - **Salary:** £59,400.0 - £82,867.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Authentication Protocols, Microsoft Azure, Software as a Service, Multi-Factor Authentication, Identity and Access Management, OAuth, OpenID, Windows PowerShell, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Enterprise Software Applications, Okta, Information Technology, Splunk, Servicenow - **Published:** July 29, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=bc7b70fced25bff0 ## About the Role * Bachelor's degree in Computer Science or a related discipline (or equivalent practical experience). * Strong hands-on experience engineering enterprise IAM solutions. * 2+ years' experience with Okta Single Sign-On (SSO) and Lifecycle Management. * 2+ years' experience with Okta Identity Governance (OIG). * 2+ years' experience developing solutions using Okta Workflows. * 5+ years' experience working with Active Directory in complex enterprise environments. * Strong knowledge of Active Directory Group Policies (GPO). * Experience with Microsoft Entra ID (Azure Active Directory). * Experience with Azure Application Proxy or similar application proxy technologies. * Strong PowerShell scripting skills with a focus on automation. * Experience with Microsoft Certificate Services. * Excellent troubleshooting and problem-solving skills. * Ability to work independently and thrive in a fast-paced, evolving environment. Desirable: * ServiceNow * Splunk * Experience with System for Cross-domain Identity Management (SCIM) * Experience integrating SaaS applications with enterprise identity platforms * Familiarity with Infrastructure as Code or automation tooling ## Description We're looking for a Senior IAM Engineer to own and evolve our enterprise identity platform across Okta and Microsoft Entra ID. This highly visible role partners closely with teams across the organization, requiring a proactive, innovative mindset and a willingness to think beyond conventional approaches. Operating within an Agile environment, the team moves at pace to adapt to evolving business needs. Our technologists bring a diverse range of expertise and share a commitment to treating technology as a craft, with a strong focus on delivering high-quality, customer-centric outcomes. The team underpins critical business services, enabling key functions across the organization to deliver seamless and exceptional user experiences. Responsibilities * Design, build, and maintain enterprise Identity and Access Management solutions using Okta and Microsoft Entra ID. * Engineer and automate Joiner, Mover, Leaver (JML) lifecycle processes using Okta Workflows. * Design and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity governance solutions across enterprise applications. * Integrate cloud and on-premises applications using SAML, OAuth, OIDC, SCIM, and other modern authentication protocols. * Develop PowerShell automation to streamline identity provisioning, administration, and operational processes. * Engineer and maintain hybrid identity services across Active Directory and Microsoft Entra ID. * Administer and optimize Active Directory, including Group Policy management and enterprise domain services. * Support Azure Application Proxy and secure remote application access. * Participate in the design, planning, and delivery of identity-related projects and platform enhancements. * Produce and maintain technical documentation for identity architecture, integrations, and automation. * Provide third-line technical support for complex IAM issues and contribute to incident response and root cause analysis. * Stay current with emerging identity technologies and recommend improvements to the platform. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Backstage in Practice: Offloading Developer Operational Work Through Platform Self-Service](https://www.wearedevelopers.com/videos/1922-backstage-in-practice-offloading-developer-operational-work-through-platform-self-service) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)