Job description:

Identity Management - Site Reliability Engineer (SRE)
Morgan Stanley is seeking a highly motivated and skilled individual to join our global Identity
Management Reliability Engineering team. This role is part of the Identity and Access Management
(IAM) department under the Cyber, Data, Risk, and Resilience (CDRR) division.
As a Site Reliability Engineer, you will join a dynamic IAM cybersecurity team that manages high availability core infrastructure covering multiple LDAP environments and Identity Management
infrastructure. Morgan Stanley directory systems are responsible for over 2.2 billion searches and
lookups per day which enable Morgan Stanley employees to conduct critical business functions.
Additionally, our identity management infrastructure is responsible for the full life cycle of over 120,000
users and 300,000 non-human identities.
Specifically, you will be part of a global reliability engineering team supporting critical Workforce
Identity Management tools and Directory Services built on ForgeRock and PingIdentity systems. The
ideal candidate will have a strong foundation in these tools and prior experience working with LDAP. You
will apply SRE principles, focusing on automation and evolving technology into an evergreen
environment. This position requires technical expertise and a proactive approach to problem-solving
and an intermediate level of python programming skills.
Whether you are an aspiring junior or an experienced professional, we welcome your application to join
our innovative and collaborative team.
Ideal Candidate Qualifications:
Experience in Identity and Access Management (IAM)
Previous experience in IT Operations, Reliability Engineering, or DevOps
Exposure to Agile / DevOps environments
Knowledge of Site Reliability Engineering (SRE) principles and methodology
ITIL, CISSP or similar certification (optional)
Responsibilities:
Support Identity Management applications for human and system account management built on
the PingIdentity / ForgeRock Identity Management products.
Maintain LDAP Directory Services products such as PingDirectory and PingDataSync
Provide first-line support for Identity Management during large-scale outages, including post mortem, pre-mortems and problem management with a data-driven strategies and a code-first
approach to problem solving.
Prepare and execute change management activities, often automating and creating tools where
necessary.
Collaborate with partner enterprise technology teams and provide support to stakeholders and
our Level 2 operations team
Contribute to performance and training assessments of team members
Improving stability of Identity Management platforms by identifying and implementing alert
automation and self-healing functions where possible.
Performance and scalability ensure systems can scale seamlessly to handle increased load and
monitor the performance of our applications and infrastructure using our service level objectives
(SLO) and service level indicators (SLI).
Participate in on-call rotations (weekday and weekend cycles)
Share responsibilities and knowledge across the team, engaging with our community and
stakeholders to gather feedback to improve our systems.
Address security and compliance issues ensuring we are meeting industry standards and have
implemented best practices for security and data protection with our systems.
Technical Skills:
Basic understanding of the LDAP protocol and its functionalities
Experience supporting PingDirectory and PingDataSync
Familiarity with IAM products from providers such as ForgeRock and Ping Identity
Knowledge of enterprise security standards and concepts
Understanding of general enterprise infrastructure concepts and troubleshooting, includin