At Moodys we unite the brightest minds to turn todays risks into tomorrows opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they arewith the freedom to exchange ideas think innovatively and listen to each other and customers in meaningful ways. Moodys is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment were advancing AI to move from insight to actionenabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity helping our clients navigate uncertainty with clarity speed and confidence.
If you are excited about this opportunity but do not meet every single requirement please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship lead with curiosity champion diverse perspectives turn inputs into actions and uphold trust through integrity.
Skills and Competencies
- 37 years of IAM engineering experience with 2 years in direct Privileged Access Management in enterprise or regulated environments
- Strong scripting expertise (Python/ PowerShell) with working knowledge of Java or similar programming languages
- Experience in system integration using REST APIs SCIM webhooks and event-driven architectures with knowledge of authentication protocols (OAuth 2.0 mTLS API keys JWT SAML OIDC)
- Solid understanding of identity lifecycle management (JML Active Directory lifecycle) and Non-Human Identity (NHI) security (service accounts API keys workload identities)
- Hands-on PAM expertise including credential vaulting password rotation privileged session management/monitoring JIT and least privilege access break-glass governance and access reviews/certifications along with RBAC/ABAC models
- Strong foundation in core security principles (Zero Trust least privilege segregation of duties auditability) with additional exposure to tools like BeyondTrust (Password Safe DevOps Secrets Protected PRA EPM Insights) ServiceNow integrations and SailPoint (IIQ/ISC) for IGA/PAM convergence will be a plus
- Experience with cloud platforms (Azure preferred AWS/GCP) with familiarity of DevOps ecosystem (CI/CD pipelines Git automated testing Terraform Helm Kubernetes Docker)
- Demonstrated proficiency in artificial intelligence concepts with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use.
Education
- Bachelors degree in Computer Science Information Technology Cybersecurity Engineering or a related field or equivalent practical experience
Responsibilities
Design build and scale secure cloud-first identity and privileged access management solutions that support a global enterprise and enable highly automated reliable identity services.
- Design develop and enhance IAM and PAM capabilities across authentication authorization identity governance and privileged access management
- Build and maintain integrations using REST APIs SCIM web services and event-driven architectures
- Implement and optimize identity lifecycle processes (provisioning access requests deprovisioning certifications and privileged access reviews)
- Define and enforce access models and policies (least privilege Just-in-Time access break-glass governance) aligned with business and security needs
- Develop automation and reusable services (credential vaulting password rotation) to improve efficiency and system reliability
- Implement CI/CD pipelines automated testing and version-controlled deployments for IAM and PAM solutions
- Enhance observability through logging monitoring alerting service health metrics and privileged session tracking
- Troubleshoot complex issues drive root cause analysis leverage AI-driven automation for identity operations/anomaly detection and collaborate with security engineering and product teams while maintaining documentation runbooks and audit/compliance readiness
About the Team
The Identity and Access Management team is focused on building and operating a modern scalable and secure identity and privileged access platform that supports Moodys global workforce and technology ecosystem. The team partners closely with cybersecurity engineering and business stakeholders to deliver automated cloud-first identity and PAM solutions that enable innovation while maintaining strong security governance and compliance standards.
Moodys is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion sex national origin disability protected veteran status sexual orientation gender expression gender identity or any other characteristic protected by law.
Candidates for Moodys Corporation may be asked to disclose securities holdings pursuant to Moodys Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy including remediation of positions in those holdings as necessary.