IAM Directory Automation Senior Engineer

IAM Directory Automation Senior Engineer

Today's world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of over 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team helps protect the EY brand and build client trust.

Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value.

The opportunity

Identity and Access Management (IAM) organization, a part of Information Security which, enables over 330,000 individuals across 140+ countries to access systems and information securely. As a member of the Identity and Access Management (IAM) team this position will contribute towards execution of an IAM roadmap that meets security requirements, including but not limited to security for, a complex Active Directory (AD) and Azure AD (AAD) environment, hybrid cloud deployment, mobile computing, policy driven security, SSO, identity lifecycle management, and federation focusing on multiple protocols.

We offer opportunities to develop new skills and progress your career receiving support, coaching and feedback from colleagues around the world. This role will give you an opportunity to work with some of the best talent in the industry!

Your key responsibilities

The role involves collaborating with a global team to architect, design, and develop systems supporting EY's Active Directory (AD) and Azure Active Directory (AAD) environments. You will work closely with IT teams to design, implement, and support Tier 0 solutions to ensure security, reliability, and efficiency of the Tier 0 environment. Additionally, you will document processes and provide training to team members as needed. This position requires a proactive approach and strong problem-solving skills to ensure the seamless operation of our Active Directory infrastructure.

Key Responsibilities:

• Identify and implement opportunities for automation of tasks, processes, or entire solutions, and seek continuous improvement in the environment.
• Maintain directory technologies, supporting infrastructure, and other security-aligned functions, ensuring compliance with EY's technology development and deployment standards.
• Mentor and guide team members across different time zones and cultures, maintaining effective oversight of all activities.
• Build strong relationships across all levels of a diverse, global, and matrixed organization.
• Participate in or lead the resolution of complex, high-severity incidents.
• Apply modern best practices, standards, security guidelines, and design principles to security solutions and services as appropriate.
• Skills and attributes for success
• Solid understanding of a hybrid Identity infrastructure using Microsoft Active Directory Domain Services and Microsoft Azure AD.
• Consultative skill to translate business needs into workable technology solutions that meet the needs of internal customers.
• Deep technical proficiency in designing, developing, and debugging solutions.
• Strong understanding of security principles and best practices
• Competency in user and group access control, policy enforcement, and management.
• Proficiency in scripting languages such as PowerShell
• Resolves production and system enhancement issues.
• Develops working relationships with peers across Development & Engineering and Architecture teams, collaborating to develop solutions.
• Drives alignment to the relevant processes, procedures, standards, technical design.
• Attention to detail and a security minded approach to solving problems.
• Excellent interpersonal communication and organizational skills and the ability to work within tight timeframes.
• Rapidly learn new and emerging technologies with ability to rapidly define engineering standards.
• Passionate about delivering a highly secure and stable environment with an eye for continuous improvement.
• Experience with integrating new and emerging technologies into an environment and welcomes the opportunity to work on cloud-based platforms.

To qualify for the role you must have

• Bachelor's Degree in Computer Science, Engineering, IT, Mathematics or a related field, or equivalent work experience required
• 8+ years of experience in an engineering role, demonstrating progression of increasingly complex job responsibilities during the period inclusive of project management skills, engineering remediation techniques and project planning and implementation.
• Certification as a Microsoft Certified Systems Administrator (MCSA)
• 8+ years Active Directory
• 2+ years Azure AD
• 3+ years PowerShell scripting

Ideally, you'll also have

• Understanding and experience with Azure managed services.
• Understanding and experience with Cloud service providers, such as AWS.
• Understanding and experience with System Center Configuration Manager.
• Understanding and experience with Quest Change Auditor
• Understanding and experience with Quest Active Roles Server
• Understanding and experience with Azure Kusto Query Language (KQL)
• Understanding and experience with Splunk Search Processing Language (SPL)
• Understanding and experience with Microsoft Enhanced Security Admin Environment (ESAE)
• Understanding and experience with Process Automation product such as Azure Automation or Orchestrator.
• Understanding and experience with Quest Recovery Manager for Active Directory (RMAD)