IAM Engineer (Okta) - StoneX Group

Connecting clients to markets – and talent to opportunity 

With 4,300 employees and over 400,000 retail and institutional clients from more than 80 offices spread across five continents, we’re a Fortune-100, Nasdaq-listed provider, connecting clients to the global markets – focusing on innovation, human connection, and providing world-class products and services to all types of investors. 

Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, The StoneX Group is made up of four segments that offer endless potential for progression and growth. 

Business Segment Corporate Functions: Engage in a deep variety of business-critical activities that keep our company running efficiently. From strategic marketing and financial management to human resources and operational oversight, you’ll have the opportunity to optimize processes and implement game-changing policies. 

Position Purpose: StoneX is searching for a candidate to join our Identity Application Integration Team which is responsible for Multi-Factor Authentication and Single Sign on Solutions, Active Directory and custom user store integrations, enhancements, and maintenance, as well as support of existing Legacy toolsets.

This individual will support existing platforms as well as help design and implement future access management solutions. The selected candidate will work as part of the existing IAM team structure with a specific focus on SSO service delivery for new applications and the migration of existing toolsets. 

This individual must be capable of working directly with internal and external development teams to design strategy for improving end user experience.  Excellent communication, strong organizational skills, and attention to detail are essential.

Primary duties will include:

• Practice Extreme Ownership of the SSO/MFA services for a Fortune 100 financial firm.
• Work closely with key stakeholders to understand requirements for implementing connections through legacy and new SSO & MFA solutions.
• Collect and qualify required artifacts, develop test plans, and lead application implementation efforts to guarantee success.
• Consult with stakeholders across business units when implementing access levels for new systems to ensure quality and accuracy.
• Conduct regular or emergency maintenance and software upgrades as required
• Prepare documentation for training and audit, and act as primary contact and subject matter expert of federation and Single Sign on.

To land this role you will need:

• 3+ years administering IAM toolset Okta
• Deep knowledge of the OIDC protocol is required
• 3+ years’ experience scripting and automating solutions.
• High level of attention to detail and accuracy.
• Develop automation and/or scripting to augment any IAM solution as required.
• SSO / Federation experience required.
• Strong understanding and experience in Identity Lifecycle Management utilizing Okta Workflows
• Must possess a strong ability to document standards, methods and produce architectural drawings.
• Ability to manage multiple competing priorities, and work effectively under the pressure of time constraints in a fast-paced, collaborative environment
• Ability to work independently and manage workload with minimal supervision
• Be available on an on-call basis to respond to pending issues or problems arising during non-business hours and provide support and response.
• Ability to quickly learn new technologies

What makes you stand out: 

• Implementation experience in the CIAM space
• Full stack development skillset including ASP.Net MVC, C#, Web API, & CSS
• SQL Server, JSON, XML, Active Directory
• Knowledge of security tokens and protocols including OAuth 2.0 / OpenId, JWT and SAML 2.0
• Windows Server, IIS, Azure, Office 365, PowerShell, Visual Studio Team

Education / Certification Requirements:

• BS/MS degree in Computer Science, Engineering or a related subject
• Equivalent professional experience

Working environment:

• Hybrid - (3 days in office per week)