The Principal Authentication Engineer will join the Authentication Engineering team within Cybersecurity, focusing on Identity and Access Management (IAM). This role involves designing, integrating, and operating standards-based authentication solutions at a global scale. The engineer will work to enable secure access for both human and non-human identities across hybrid environments. The position emphasizes hands-on engineering, collaboration across teams, and the implementation of best practices in IAM.

• 10+ years of experience in IAM engineering within complex, global settings.
• Deep expertise in authentication protocols such as OIDC/OAuth2, SAML, SSO, and FIDO2/WebAuthn.
• Proficiency in IAM platforms including HashiCorp Vault, CyberArk, and SailPoint.
• Strong skills in automation and reliability practices, including IaC and CI/CD.
• Ability to communicate effectively and enable teams through clear documentation and coaching.

• Design, build, integrate, and ship secure, scalable authentication solutions.
• Implement and harden enterprise authentication and federation protocols.
• Deliver end-to-end integrations across various IAM platforms in cloud and hybrid environments.
• Operate and evolve large-scale IAM estates with a focus on reliability and automation.
• Define and enforce policies for identity lifecycle management and authentication controls.

• Morgan Stanley offers extensive benefits that support employees’ careers, health, finances, and families, including top-tier medical coverage, mental health support, generous parental leave, fertility and family-building benefits, and robust retirement and stock purchase plans. Employees also gain access to continuous learning and networking opportunities, volunteer and giving programs aligned with the firm’s values, and hundreds of lifestyle perks like discounted products, cultural and entertainment tickets, and commuter savings.