Principal Cyber Security Engineer - Vice President

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Principal Cyber Security Engineering position at Vice President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.

What you'll do in the role:
This position participates in a 24x7 on-call rotation as part of the Cloud Identity engineering organization.

• Serve as the Principal Engineer and technical authority for Cloud Identity and Access Management across Azure, AWS, and Google Cloud Platform (GCP).

• Work with the Product Owner and Technical Area Lead on defining and driving the strategic technical vision, architecture, and roadmap for enterprise cloud identity services, ensuring alignment with Firm standards, security requirements, regulatory obligations, and long-term technology objectives.

• Lead the design and evolution of scalable, resilient, and secure identity platforms supporting workforce, workload, service, and machine identities across multi-cloud environments.

• Establish architectural standards, reference patterns, and engineering best practices for authentication, authorization, federation, privileged access, and identity governance capabilities.

• Drive the adoption of cloud-native and automated solutions through infrastructure-as-code, policy-as-code, and platform engineering principles.

• Partner with senior technology leaders, product owners, security architects, and engineering teams to influence cloud identity strategy and guide critical technology decisions.

• Lead the technical design and implementation of enterprise-scale identity capabilities, including federation, role-based and attribute-based access control, workload identity management, provisioning, and lifecycle governance.

• Evaluate emerging cloud and identity technologies, providing recommendations that improve security, operational efficiency, resiliency, and developer experience.

• Champion automation initiatives by developing frameworks, tooling, and reusable services that improve consistency, observability, and operational excellence across cloud platforms.

• Act as the highest-level escalation point for complex technical challenges, performing deep root cause analysis and driving durable corrective actions.

• Mentor and develop engineers, fostering technical excellence and cultivating future technical leaders across the organization.

What you'll bring to the role:

• Experience in executing IT strategy, delivery and complex initiatives.

• Ability to present information in a clear and concise manner to technology and business leadership.

• Advanced understanding of functional area and competent understanding of competitive environment.

• Extensive experience designing, implementing, and operating enterprise-scale Identity and Access Management (IAM) solutions across Azure, AWS, and Google Cloud Platform.

• Deep expertise in cloud identity architectures, including workforce identities, workload identities, service accounts, federated identities, and machine authentication models.

• > Proven experience defining technical strategy and architecture for large-scale cloud platforms operating under stringent security and regulatory requirements.

• Expert-level knowledge of authentication and authorization protocols, including OAuth 2.0, OpenID Connect (OIDC), SAML, Kerberos, SCIM, and emerging workload identity standards.

• Strong experience implementing identity federation and single sign-on solutions using platforms such as Microsoft Entra ID, PingFederate, Okta, or equivalent enterprise identity providers.

• Advanced knowledge of cloud-native authorization models, including Azure RBAC, AWS IAM, GCP IAM, ABAC, and policy-based access control frameworks.

• Significant experience developing automation, platform services, and infrastructure-as-code solutions using Python, Terraform, or comparable technologies.

• Demonstrated success leading large, complex engineering initiatives that span organizational, geographic, and technology boundaries.

• Ability to influence senior stakeholders, drive technical consensus, and guide strategic investment decisions.

• Experience establishing engineering standards, governance controls, and reference architectures within large enterprise environments.

• Strong understanding of security architecture, identity governance, privileged access management, cloud compliance, and operational resiliency practices.

• Exceptional communication skills with the ability to articulate technical concepts to both engineering teams and executive leadership.

• Proven track record of mentoring engineers and cultivating technical talent across multiple levels of experience.

• Typically requires 12+ years of relevant experience in cloud, identity, security, or platform engineering disciplines, including significant experience operating at an enterprise scale.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years.  Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices​ into your browser.

Salary range for the position: $135,000 and $190,000 per year. The successful candidate may be eligible for an annual discretionary incentive compensation award. The successful candidate may be eligible to participate in the relevant business unit’s incentive compensation plan, which also may include a discretionary bonus component. Morgan Stanley offers a full spectrum of benefits, including Medical, Prescription Drug, Dental, Vision, Health Savings Account, Dependent Day Care Savings Account, Life Insurance, Disability and Other Insurance Plans, Paid Time Off (including Sick Leave consistent with state and local law, Parental Leave and 20 Vacation Days annually), 10 Paid Holidays, 401(k), and Short/Long Term Disability, in addition to other special perks reserved for our employees. Please visit mybenefits.morganstanley.com to learn more about our benefit offerings.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background.  Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.