Sr Cybersecurity Engineer (IDAM)

Moody’s is hiring a Sr Cybersecurity Engineer to support end-to-end Identity and Access Management (IAM) initiatives, with engineering ownership across workforce identity, authentication and MFA, provisioning automation, and audit-ready operations. The role is onsite in Golden, Colorado and includes coverage for both Okta and Microsoft Entra ID capabilities in regulated environments.

Key Responsibilities

• Own end-to-end engineering, configuration, and administration of workforce identities in Moody’s Okta tenants, including FedRAMP workforce, non-production, and Customer Identity and Access Management tenants, while applying established standards and requirements.
• Design and maintain Single Sign-On and application integrations using SAML, OIDC, and SCIM across enterprise applications.
• Engineer authentication and multi-factor authentication policy to enforce a phishing-resistant assurance level.
• Own identity lifecycle (joiner/mover/leaver) and provisioning workflows, including automation using Okta Workflows.
• Monitor and respond to identity risk signals and threats.
• Design and administer groups, custom admin roles, and least-privilege access models.
• Produce and maintain SOX and FedRAMP audit evidence in partnership with Cybersecurity Governance and Audit teams.
• Provide engineering coverage for Microsoft Entra ID, including Conditional Access policy design and hybrid identity management configurations.
• Support hybrid identity operations and coordinate with the Entra/Active Directory engineering owner on shared administrative responsibilities under the team’s admin-ownership model.

Required Qualifications

• 3+ years of hands-on access management engineering experience, including workforce identity configuration, administration, and lifecycle management (Okta preferred).
• Strong depth in IAM and Single Sign-On and application integration patterns, including SAML, OIDC, and SCIM.
• Experience engineering authentication and multi-factor authentication policy using phishing-resistant methods.
• Hands-on experience with identity lifecycle and provisioning automation.
• Experience operating in regulated, audited environments (SOX/ITGC, FedRAMP, or equivalent), including producing audit evidence and control documentation.
• Working knowledge of identity governance concepts such as access requests, certifications, and separation of duties (Okta Identity Governance experience preferred).
• Familiarity with Microsoft Entra ID administration, including Conditional Access policy engineering and hybrid identity management (preferred).
• Strong written communication skills for audit-ready documentation and evidence packages.
• Ability to independently lead end-to-end engineering work from requirements through operational support.
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency, including growing awareness of AI risk management and a commitment to responsible and ethical AI use.

Technologies

• Okta
• SAML
• OIDC
• SCIM
• Okta Workflows
• Okta Identity Governance
• Microsoft Entra ID
• Conditional Access
• FedRAMP
• SOX
• ITGC
• Microsoft Active Directory

Preferred Certifications and Experience

• Advanced technical certifications preferred, such as Okta Certified Administrator/Professional (Consultant a plus), Microsoft Certified: Identity and Access Administrator (SC-300), CISSP, or equivalent identity/security certifications.
• Prior FedRAMP or US federal identity/compliance experience preferred.

Education

Bachelor’s degree or equivalent qualification in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

Compensation and Location

• Location: Golden, CO (onsite)
• Salary: USD 116,500 - 192,300 per year

Benefits

• Incentive compensation
• Medical, dental, vision
• Parental leave
• Paid time off
• 401(k) plan with employee and company contribution opportunities
• Life, disability, and accident insurance
• Discounted employee stock purchase plan
• Tuition reimbursement

About the Team

The Identity Engineering team designs, builds, and operates the identity and access management platforms that secure access across Moody’s enterprise and regulated environments.