- Lead the engineering and resilience of the directory and identity lifecycle platforms that Helios relies on, and guide the engineers working on them.
Responsibilities
- Shape the engineering backlog and prioritise improvements to capacity, performance and monitoring.
- Lead root-cause analysis on major incidents and make sure fixes are tracked to closure.
- Design resilience, disaster-recovery and business-continuity tests, and own the evidence.
- Review the work of other engineers and share good practice.
- Automate builds, configuration and deployments with Terraform, Ansible and Jenkins.
- Write runbooks and production-readiness documentation.
- Hand over code, configuration and knowledge to Morgan Stanley teams.
Required profile
- Advanced IDM / SRE engineer with 7 to 15 years of experience.
- Experience with LDAP directory services and with identity lifecycle or authentication platforms in an enterprise or financial-sector setting.
- Site reliability practices: monitoring, capacity, incident analysis, resilience and disaster-recovery testing.
- Linux (RHEL) administration and infrastructure-as-code with Terraform and Ansible; Git and CI/CD (Jenkins).
- Knowledge of certificate management, TLS and enterprise authentication standards.
- Comfortable working in a team on site, in English, and documenting work for acceptance.
Strong assets
- Hands-on experience with Ping Identity Directory Server or ForgeRock Directory Services, and with ForgeRock IDM.
- Experience with SCIM provisioning and Microsoft Entra ID.
- On-call and production-support experience on identity platforms.
- Previous experience at a bank or with Morgan Stanley, and security screening already completed.