M

Morgan Stanley

Manages investments and advises on financing

Lead Authentication Engineer Vice President Cybersecurity Engineering

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

  • At least 12 years of cybersecurity engineering experience with hands-on principal engineering experience, including designing and implementing solutions, coding, configuring and integrating products, and shipping production outcomes.
  • Deep enterprise-scale authentication expertise with OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI (CA/RA, mTLS, certificate lifecycle), API authentication (JWT/mTLS), and Unix/Linux authentication.
  • Experience with HashiCorp Vault, HSMs, CyberArk, SailPoint, Entra ID, Ping Identity, IDM/LDAP, and RCBI, including policy design, integration, automation, and migrations.
  • Experience operating IAM and authentication services across large, globally distributed environments with multi-region HA/DR, performance tuning, infrastructure as code (Terraform), configuration management (Ansible/Puppet/Chef), CI/CD, and observability; strong Shell plus Python or Go skills.
  • Knowledge of threat modeling, least privilege, privileged access management, secrets management, policy-as-code, and auditability for human and non-human identities, including agentic systems.
  • Ability to customize and integrate vendor products and open standards into cohesive, well-documented solutions and APIs.
  • Experience in large-institution environments, influencing roadmaps, and driving adoption of controls and best practices.
  • At least 6 years of relevant work experience to perform the role.

Responsibilities

  • Design, build, integrate, and ship secure, scalable authentication solutions for human and non-human identities, including bots, service accounts, applications, and agentic systems.
  • Implement and harden OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI (mTLS and certificate lifecycle), API authentication, and Unix/Linux authentication.
  • Deliver end-to-end integrations across Entra ID, Ping Identity, SailPoint, CyberArk, HashiCorp Vault, HSMs, IDM/LDAP, and RCBI in cloud and hybrid environments.
  • Operate and evolve large-scale IAM estates using HA/DR, performance tuning, infrastructure as code (Terraform), configuration management (Ansible/Puppet/Chef), CI/CD, observability, and safe deployment strategies.
  • Collaborate with product and platform leads to scale adoption; participate in on-call duties, lead root-cause analyses, and drive operational excellence.
  • Translate complex designs into epics, stories, runbooks, and pipelines; produce architecture decision records, standards, and audit-ready documentation for engineers, SREs, product owners, and QA.

About the Company

Morgan Stanley

Manages investments and advises on financing

Morgan Stanley advises companies and governments on financing and manages investments for institutions, individuals, and families. Its business combines investment banking and securities trading with wealth management and an asset-management division that invests across public and private markets. Bankers arrange stock and bond sales and advise on mergers, while advisors build client portfolios and fund managers invest money under agreed strategies. The firm earns advisory and management fees, trading revenue, commissions, and interest from lending and deposits. Morgan Stanley was founded as a partnership in 1935 and is headquartered in New York City.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
1935

Recently Posted Jobs

Explore more opportunities at Morgan Stanley

See more jobs