Lead IAM Engineer: Global Authentication & Security

PowerToFly; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Morgan Stanley is seeking a Principal Authentication Engineer to join the Authentication Engineering (IAM) team. You will design, integrate, and operate standards-based authentication at global scale across hybrid environments—enabling secure, seamless access for our workforce and platforms.

Lead hands-on engineering for human and non-human identities, own enterprise federation (OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn), and drive automation using Terraform, Ansible/Puppet/Chef, CI/CD.

Qualifications

• Hands-on experience designing and shipping production IAM solutions.
• Expertise with OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI and API auth.
• Experience integrating enterprise IAM platforms and cloud/hybrid environments.

Responsibilities

• Lead hands-on authentication engineering for identities including bots, service accounts, and applications.
• Own enterprise authentication & federation across OIDC/OAuth2, SAML, SSO, and PKI.
• Integrate IAM platforms (Entra ID, Ping Identity, SailPoint, CyberArk, HashiCorp Vault) across cloud/hybrid environments.
• Drive reliability and automation at scale with IaC, config management, CI/CD, and observability.
• Harden identity controls and govern secrets management with policy-as-code.

Skills

Hands-on engineering

Authentication expertise

Cloud & hybrid environments

Shell scripting

Tools

HashiCorp Vault

Entra ID

Ping Identity

SailPoint

CyberArk

RCBI

LDAP

Terraform

Ansible

Puppet

Chef

Job description

Morgan Stanley is seeking a Principal Authentication Engineer to join the Authentication Engineering (IAM) team. You will design, integrate, and operate standards-based authentication at global scale across hybrid environments—enabling secure, seamless access for our workforce and platforms.

Lead hands-on engineering for human and non-human identities, own enterprise federation (OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn), and drive automation using Terraform, Ansible/Puppet/Chef, CI/CD.