About the Role

We are hiring a Senior Infrastructure Engineer to manage enterprise Identity & Access Management across Active Directory and Okta. This is a server/infrastructure-focused role (not desktop support) requiring intermediate-level, hands-on expertise in AD administration and Okta administration.

Key Skills at a Glance

- Active Directory (server/infra-side): 4+ years
- Okta administration: intermediate level, 2+ years
- Azure AD (Entra ID): working knowledge, 1-2+ years
- PowerShell scripting: basic to intermediate
- Okta Workflows / OIG: good to have

Key Responsibilities

- Administer and support enterprise Active Directory infrastructure Domain Controllers, replication, FSMO roles, Group Policies, OUs, and DNS integration
- Manage Okta as the primary IdP Universal Directory, app integrations (SAML/OIDC), authentication policies, and attribute mapping
- Understand and troubleshoot Okta attributes and attribute flows between AD/HR sources and downstream applications
- Handle Joiner-Mover-Leaver (JML) identity lifecycle processes across AD and Okta
- Support AD-to-Okta sync via Okta AD Agent/LDAP Agent, resolving sync and provisioning issues
- Assist with Okta Workflows automation for identity processes (added advantage)
- Support Okta Identity Governance (OIG) — access requests and access certifications (added advantage)
- Act as escalation point for AD/Okta incidents and access-related issues
- Maintain documentation, runbooks, and knowledge articles for IAM processes
- Collaborate with application, security, and infra teams on IAM projects




- Own end-to-end delivery of assigned IAM initiatives, from planning to rollout
- Mentor and guide junior engineers on AD/Okta best practices
- Support audit and compliance requirements — access reviews, evidence gathering, and remediation
- Participate in on-call/escalation rotation for critical identity infrastructure issues

Required Skills & Experience

- 4+ years of experience in IAM Engineering, with strong server-side AD administration (not desktop/helpdesk AD support)
- Intermediate-level, hands-on experience with Okta — Universal Directory, app integrations, authentication policies, attribute mapping
- Solid understanding of AD Group Policies, OU structure, and directory health/troubleshooting
- Working knowledge of SSO protocols (SAML, OIDC, LDAP)
- Working knowledge of Azure AD (Entra ID) — user/group management, conditional access basics, and hybrid identity (AD Connect/sync)
- Basic PowerShell scripting for AD/Okta/Azure AD automation
- Strong analytical and troubleshooting skills
- Good stakeholder management and communication skills — able to work directly with business and application teams
- Bachelor's degree in Computer Science, IT, or related field (or equivalent experience)

Good to Have

- Exposure to Okta Workflows
- Exposure to Okta Identity Governance (OIG)
- Experience with Azure AD Connect/hybrid identity setups
- Okta Certified Skilled/Administrator certification
- Experience with ServiceNow or Splunk

Morningstar is an equal opportunity employer.

📌 Senior Infrastructure Engineer (Navi Mumbai)
🏢 Morningstar
📍 Navi Mumbai