:

About the Role :

We are hiring a Senior Infrastructure Engineer to manage enterprise Identity & Access Management across Active Directory and Okta. This is a server/infrastructure-focused role (not desktop support) requiring intermediate-level, hands-on expertise in AD administration and Okta administration.

Key Skills at a Glance :

- Active Directory (server/infra-side) : 4 years
- Okta administration : intermediate level, 2 years
- Azure AD (Entra ID) : working knowledge, 1-2 years
- PowerShell scripting : basic to intermediate
- Okta Workflows / OIG : good to have

Key Responsibilities :

- Administer and support enterprise Active Directory infrastructure Domain Controllers, replication, FSMO roles, Group Policies, OUs, and DNS integration.
- Manage Okta as the primary IdP Universal Directory, app integrations (SAML/OIDC), authentication policies, and attribute mapping.
- Understand and troubleshoot Okta attributes and attribute flows between AD/HR sources and downstream applications.
- Handle Joiner-Mover-Leaver (JML) identity lifecycle processes across AD and Okta.
- Support AD-to-Okta sync via Okta AD Agent/LDAP Agent, resolving sync and provisioning issues.
- Assist with Okta Workflows automation for identity processes (added advantage).
- Support Okta Identity Governance (OIG) access requests and access certifications (added advantage).
- Act as escalation point for AD/Okta incidents and access-related issues.
- Maintain documentation, runbooks, and knowledge articles for IAM processes.
- Collaborate with application, security, and infra teams on IAM projects.




- Own end-to-end delivery of assigned IAM initiatives, from planning to rollout.
- Mentor and guide junior engineers on AD/Okta best practices.
- Support audit and compliance requirements - access reviews, evidence gathering, and remediation.
- Participate in on-call/escalation rotation for critical identity infrastructure issues.

Required Skills &

Experience :

- 4 years of experience in IAM Engineering, with strong server-side AD administration (not desktop/helpdesk AD support).
- Intermediate-level, hands-on experience with Okta - Universal Directory, app integrations, authentication policies, attribute mapping.
- Solid understanding of AD Group Policies, OU structure, and directory health/troubleshooting.
- Working knowledge of SSO protocols (SAML, OIDC, LDAP).
- Working knowledge of Azure AD (Entra ID) - user/group management, conditional access basics, and hybrid identity (AD Connect/sync).
- Basic PowerShell scripting for AD/Okta/Azure AD automation.
- Solid analytical and troubleshooting skills.
- Good stakeholder management and communication skills - able to work directly with business and application teams.
- Bachelor's degree in Computer Science, IT, or related field (or equivalent experience).

Good to Have :

- Exposure to Okta Workflows.
- Exposure to Okta Identity Governance (OIG).
- Experience with Azure AD Connect/hybrid identity setups.
- Okta Certified Professional/Administrator certification.
- Experience with ServiceNow or Splunk.

Morningstar is an equal opportunity employer.

📌 Senior Infrastructure Engineer - Active Directory/Okta Administration (India)
🏢 Morningstar
📍 India