IAM Engineer — Okta/Entra, Phishing-Resistant Access

Cybersecurity Jobs; Golden (CO); On-site; USD 117,000 - 192,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) plan

Paid time off

Life, disability, and accident ins.

Parental leave

Tuition reimbursement

Employee stock purchase plan

Job summary

Moody’s Identity Engineering team is seeking an IAM engineer for an onsite role in Golden, CO. You will design, build, and operate identity & access management platforms across Moody’s enterprise, focusing on Okta, SSO, MFA, provisioning automation, and audit-ready operations.

You will own end-to-end engineering for workforce identities, implement SAML/OIDC/SCIM integrations, and support Microsoft Entra ID with Conditional Access in regulated contexts.

Qualifications

• 3+ years of hands-on IAM engineering experience (Okta preferred).
• Strong depth in IAM/SAML/OIDC/SCIM and enterprise app integrations.
• Experience in regulated environments with audit evidence and control documentation.

Responsibilities

• Own end-to-end engineering, configuration, and administration of workforce identities in Okta tenants.
• Design and maintain SSO and app integrations using SAML, OIDC, and SCIM.
• Engineer phishing-resistant MFA policies.
• Own identity lifecycle and provisioning workflows, including automation.
• Monitor identity risk signals and respond to threats.
• Produce audit-ready SOX and FedRAMP evidence with governance teams.
• Support Entra ID coverage including Conditional Access in hybrid identity.
• Collaborate with Entra/AD ownership on shared admin responsibilities.

Skills

Okta

MFA

SSO

Automation

Audit evidence

AI tools

Communication

End-to-end ownership

Hybrid/Regulated environments

Education

Bachelor's degree

Tools

Okta

Okta Workflows

Okta Identity Governance

Microsoft Entra ID

Active Directory

FedRAMP

SOX/ITGC

Job description

Moody’s Identity Engineering team is seeking an IAM engineer for an onsite role in Golden, CO. You will design, build, and operate identity & access management platforms across Moody’s enterprise, focusing on Okta, SSO, MFA, provisioning automation, and audit-ready operations.

You will own end-to-end engineering for workforce identities, implement SAML/OIDC/SCIM integrations, and support Microsoft Entra ID with Conditional Access in regulated contexts.