Senior Platform Engineer, Identity and Access Management

Description

The company provides independent investment insights, including data, research and investment management services, to individual and institutional investors in public and private markets. It manages over $300+ billion in assets and operates in 32 countries, serving financial advisors, asset managers, retirement plan providers and others.

This senior IAM role owns and develops the enterprise identity platform built on Okta and Microsoft Entra ID. You will work with teams across the organisation. The team works in an Agile setup, supports critical business services and aims to deliver smooth, high-quality experiences for users.

Responsibilities

• Own and develop the enterprise identity platform across Okta and Microsoft Entra ID, covering design, build and upkeep.
• Build and automate Joiner, Mover, Leaver (JML) lifecycle processes using Okta Workflows.
• Design and roll out Single Sign-On (SSO), Multi-Factor Authentication (MFA) and identity governance for enterprise applications.
• Connect cloud and on-premises applications using SAML, OAuth, OIDC, SCIM and other current authentication protocols.
• Write PowerShell automation for identity provisioning, administration and day-to-day operations.
• Run hybrid identity services across Active Directory and Microsoft Entra ID.
• Manage Active Directory, including Group Policy and enterprise domain services, and improve how it performs.
• Support Azure Application Proxy and keep remote access to applications secure.
• Take part in planning, design and delivery of identity projects and platform changes.
• Write and maintain technical documentation for identity architecture, integrations and automation.
• Provide third-line support for complex IAM issues and help with incident response and root cause analysis.
• Track emerging identity technologies and recommend platform improvements.

Requirements

• A bachelor's degree in Computer Science or a related discipline, or equivalent practical experience.
• Solid hands-on experience building enterprise IAM solutions.
• 2+ years of experience with Okta SSO and Lifecycle Management.
• 2+ years of experience with Okta Identity Governance (OIG).
• 2+ years of experience building solutions with Okta Workflows.
• 5+ years of experience with Active Directory in complex enterprise environments.
• Strong knowledge of Active Directory Group Policy (GPO).
• Experience with Microsoft Entra ID (Azure Active Directory).
• Experience with Azure Application Proxy or a similar application proxy technology.
• Strong PowerShell scripting skills, particularly for automation.
• Experience with Microsoft Certificate Services.
• Strong troubleshooting and problem-solving skills.
• Ability to work independently in a changing environment that moves quickly.
• Desirable: ServiceNow
• Desirable: Splunk
• Desirable: Experience with SCIM (System for Cross-domain Identity Management).
• Desirable: Experience integrating SaaS applications with enterprise identity platforms.
• Desirable: Familiarity with Infrastructure as Code or automation tooling.

Conditions

Base salary range: GBP 61,600.00-86,533.33.

Target annual bonus: 5%.

Pay and bonus target are expected to fall within the stated ranges, with the exact offer depending on qualifications, experience and other job-related factors.

Hybrid working: in most locations, four days in the office each week to collaborate in person.

The hiring entity is the company's UK legal entity.

Benefits

• A range of other benefits to add flexibility as needs change.
• Tools and resources to engage with global colleagues, wherever you are based.