Sr. Identity & Access Management Engineer

At Edelman Financial Engines, we believe everyone deserves to move their financial life forward.

We know that assets have the power to fund goals. Those numbers represent individual lifetimes filled with hard work and dreams for our clients and generations to follow. Our clients trust us to guide them forward with empathy, integrity, and invention. We uphold that same standard of respect and commitment for clients and colleagues alike.

Founded on the idea that financial education is a fundamental right for everyone—not just the wealthy, EFE continues to grow and challenge the status quo. We’re moving forward, together. If our purposeful commitment inspires you, we invite you to consider joining our team!

As a Sr. Identity & Access Management Engineer on the Identity & Access Management Team, you’ll play a pivotal role in providing support, and maintaining a stable back-office, technical infrastructure, and architectural standards for Enterprise IT Organization.

In addition to an earnest desire to help people, we are looking for the ideal candidate to complement the team’s existing talents: For this role, we need someone who has a creative spirit and new insights to help us continuously improve and accelerate our focus on innovative, best-in-class integrations, and support. If you have a bachelor’s degree in MIS/Computer Engineer, or a related field with 7-10 years’ experience in information technology or equivalent technical experience – this may be the opportunity for you!

Responsibilities:

•        7-10 years of experience in information technology or equivalent

•        Manage Active Directory and Azure Active Directory Features

•        Design Test and lead Microsoft Active Directory consolidation, and also during M&A

•        Participate in knowledge transfer and mentor others on the team as needed.

•        Provide technical assistance with single sign-on (SSO) and/or multi factor authentication solutions

•        Lead Identity Management, Azure Policy, RBAC, AD Connect, Authentication, Okta (OAuth 2, SAML)

•        Collaborate and support CyberArk deployment and upgrades

•        Collaborate and support identity automations using Okta’s no-code/low-code workflows platform

•        Educate Junior members of the team and quickly learn new technologies, find creative solutions, and communicate to both technical and non-technical audience

Requirements:

•        Validated knowledge of~ Windows 2008-2022 Active Directory Infrastructure (all aspects), Windows 2008-2022 Active Directory Administration & Delegation, Active Directory Domain migration tools (ADMT, Quest, Binary Tree, NetIQ domain migration, etc.), Windows Server 2008-2022 Operating System, Microsoft Azure AD and O365, Windows scripting (PowerShell, etc.), Microsoft Group Policy, Public Key Certificate Infrastructure, ADFS Infrastructure, Microsoft DNS Infrastructures, Microsoft ILM/FIM/MIM Server, Virtualized environments (VMWare, Hyper-V), Disaster Recovery software & processes

•        Working experience on Azure AD/Entra ID, working experience of Microsoft Exchange and Office 365, Azure/Entra tenant; Identity Management, Azure/Entra Policies, RBAC, AD Connect, Authentication, Okta (OAuth 2, SAML)

•        Solid knowledge of Azure/Entra Cloud Design and implementation

•        Outstanding Policy Recommendations/Consolidate Group Policy/Intune policy where appropriate

•        Outstanding understanding/troubleshooting of Windows Certificate Authorities, DNS, DHCP, Federated Services and other core components

Edelman Financial Engines takes a market-based approach to pay. The expected base salary range for this role nationally is [$x (1.0 Geo Zone min) - $x (1.0 Geo Zone mid)]. However, final base pay will be carefully determined based on several factors, including responsibilities, job-related skills, relevant experience, geographic location, and market conditions. Additionally, this role may be eligible for other forms of compensation and benefits, such as a discretionary bonus, health, dental and other wellness plans, and 401(k) contributions.