Job description

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence. If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. Skills and Competencies • 3+ years of hands-on access management engineering experience, including workforce identity configuration, administration, and lifecycle management (Okta preferred) • Strong depth in core Identity and Access Management and Single Sign-On protocols and application integration patterns — SAML, OIDC, and SCIM • Experience engineering authentication and multi-factor authentication policy using phishing-resistant methods • Hands-on experience with identity lifecycle and provisioning automation • Experience operating in regulated, audited environments (SOX/ITGC, FedRAMP, or equivalent), including producing audit evidence and control documentation • Working knowledge of identity governance concepts — access requests, certifications, separation of duties; Okta Identity Governance experience is preferred • Familiarity with Microsoft Entra ID administration, including Conditional Access policy engineering and hybrid identity management, is preferred • Strong written communication skills for producing audit-ready documentation and evidence packages • Ability to independently lead end-to-end engineering work from requirements through operational support • Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use. Education • Bachelor's degree or equivalent qualification in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field • Advanced technical certifications preferred, such as Okta Certified Administrator/Professional (Consultant a plus), Microsoft Certified: Identity and Access Administrator (SC-300), CISSP, or equivalent identity/security certifications • Prior FedRAMP or US federal identity/compliance experience preferred Responsibilities This role supports Identity and Access Management initiatives end to end — including access management design, engineering, configuration, operations, audit evidence, and Cloud Identity and Access Management engineering and operations. • Own end-to-end engineering, configuration, and administration of workforce identities in Moody's Okta tenants, including the FedRAMP workforce, non-production, and Customer Identity and Access Management tenants, applying established standards and requirements • Design and maintain Single Sign-On and application integrations using SAML, OIDC, and SCIM across enterprise applications • Engineer authentication and multi-factor authentication policy to enforce a phishing-resistant assurance level • Own identity lifecycle (joiner/mover/leaver) and provisioning workflows, including automation via Okta Workflows • Monitor and respond to identity risk signals and threats • Design and administer groups, custom admin roles, and least-privilege access models • Produce and maintain SOX and FedRAMP audit evidence, partnering with Cybersecurity Governance and Audit teams • Provide engineering coverage for Microsoft Entra ID, including Conditional Access policy design and hybrid identity management configurations • Support hybrid identity operations and coordinate with the Entra/Active Directory engineering owner on shared administrative responsibilities per the team's admin-ownership model About the Team The Identity Engineering team designs, builds, and operates the identity and access management platforms that secure access across Moody's enterprise and regulated environments. By joining our team, you will help extend enterprise-grade identity engineering practices into a federal compliance boundary, working on phishing-resistant authentication, identity governance, and audit-ready operations for a global financial services firm. As Moody's continues to advance its AI capabilities, our team plays a critical role in delivering the secure, trusted identity foundations that enable innovation, automation, and responsible AI adoption across the organization. For US-based roles only: the anticipated hiring base salary range for this position is $116,500.00 - $192,300.00, depending on factors such as experience, education, level, skills, and location. This range is based on a full-time position. In addition to base salary, this role is eligible for incentive compensation. Moody’s also offers a competitive benefits package, including not but limited to medical, dental, vision, parental leave, paid time off, a 401(k) plan with employee and company contribution opportunities, life, disability, and accident insurance, a discounted employee stock purchase plan, and tuition reimbursement. Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, gender, age, religion or creed, national origin, ancestry, citizenship, marital or familial status, sexual orientation, gender identity, gender expression, genetic information, physical or mental disability, military or veteran status, or any other characteristic protected by law. Moody’s also provides reasonable accommodation to qualified individuals with disabilities or based on a sincerely held religious belief in accordance with applicable laws. If you need to inquire about a reasonable accommodation, or need assistance with completing the application process, please email accommodations@moodys.com . This contact information is for accommodation requests only, and cannot be used to inquire about the status of applications For San Francisco positions, qualified applicants with criminal histories will be considered for employment consistent with the requirements of the San Francisco Fair Chance Ordinance. This position may be considered a promotional opportunity, pursuant to the Colorado Equal Pay for Equal Work Act. Click here to view our full EEO policy statement . Click here for more information on your EEO rights under the law . Click here to view our Pay Transparency Nondiscrimination statement . Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.

Requirements

Must-haves

Skills and Competencies
Strong depth in core Identity and Access Management and Single Sign-On protocols and application integration patterns — SAML, OIDC, and SCIM
Experience engineering authentication and multi-factor authentication policy using phishing-resistant methods
Hands-on experience with identity lifecycle and provisioning automation
Experience operating in regulated, audited environments (SOX/ITGC, FedRAMP, or equivalent), including producing audit evidence and control documentation
Strong written communication skills for producing audit-ready documentation and evidence packages
Ability to independently lead end-to-end engineering work from requirements through operational support
Bachelor's degree or equivalent qualification in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field
Design and maintain Single Sign-On and application integrations using SAML, OIDC, and SCIM across enterprise applications
Engineer authentication and multi-factor authentication policy to enforce a phishing-resistant assurance level
Own identity lifecycle (joiner/mover/leaver) and provisioning workflows, including automation via Okta Workflows
Monitor and respond to identity risk signals and threats
Design and administer groups, custom admin roles, and least-privilege access models
Produce and maintain SOX and FedRAMP audit evidence, partnering with Cybersecurity Governance and Audit teams
Provide engineering coverage for Microsoft Entra ID, including Conditional Access policy design and hybrid identity management configurations
Support hybrid identity operations and coordinate with the Entra/Active Directory engineering owner on shared administrative responsibilities per the team's admin-ownership model
About the Team
For San Francisco positions, qualified applicants with criminal histories will be considered for employment consistent with the requirements of the San Francisco Fair Chance Ordinance.
This position may be considered a promotional opportunity, pursuant to the Colorado Equal Pay for Equal Work Act.
Click here to view our full EEO policy statement . Click here for more information on your EEO rights under the law . Click here to view our Pay Transparency Nondiscrimination statement .

Nice-to-haves

3+ years of hands-on access management engineering experience, including workforce identity configuration, administration, and lifecycle management (Okta preferred)
Working knowledge of identity governance concepts — access requests, certifications, separation of duties; Okta Identity Governance experience is preferred
Familiarity with Microsoft Entra ID administration, including Conditional Access policy engineering and hybrid identity management, is preferred
Prior FedRAMP or US federal identity/compliance experience preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: career-feeds
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave