The opportunity
We're looking for Senior Security Analyst / Senior Consultant in the Technology Consulting team to work on various Identity and Access Management projects for our customers across the globe. Also, the professional shall need to report any identified risks within engagements and share any issues and updates with senior members of the team.
In line with EY's commitment to quality, you'll confirm that work is of the highest quality as per EY's quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you'll help to create a positive learning culture, coach and counsel junior team members and help them to develop.
Your key responsibilities
- Engage and contribute to the Identity & Access Management projects
- Provide Level 3 and Level 4 support for the system within agreed service levels.
- Ability to work independently, adapt quickly, and maintain a positive attitude.
- At least 3-6 years of Active Directory / Azure Active Directory (Entra) experience
- Have experience in maintaining & administering Active Directory
- Knowledge of Bulk updates using scripts
- Managing backup/restore of AD database.
- Must have good experience in handling escalated issue and providing RCA.
- Experienced in AD server migration, deployment, and DC promotion.
- Knowledge on AD migrations from one domain to another domain will be an added advantage.
- Good verbal & written communication, technical document writing
- Awareness of security standards such as NIST and CIS
- Must have knowledge on AD Core Servers handling through command lines.
- Must have hands-on experience on managing Azure AD connect server synchronization.
- Experience on handling synchronization issues on Azure AD Connect and troubleshoot.
- Preparing Operational Manual, Procedure Documents & Design Documents
- Understands concepts of Authentication, Authorization, Provisioning, Identity and Access Management
- Good knowledge of basic security concepts and certificate management
- Understanding of Authentication, Authorization, MFA, SSO, Federation, and Directory Services concepts
- Supporting Single Sign-On (SSO) infrastructure, analysing issue related to SSO and Multi-Factor Authentication (MFA)
- Strong knowledge about OAuth, OpenID and SAML concepts, Proficient in Azure Active Directory B2C & B2B connections
- Technical knowledge of Active Directory and experience with user and computer account administration
- Understanding of Active Directory Forest, domain, trust, permissions, access control lists and related concepts
- Knowledge and experience of AD concepts like FSMO roles, DNS, DHCP and Group Policies, AD SIEM and log events, AD Sites, GPO, Build it groups, Policies, Directory Sync
- Hands on experience on end-to-end Identity and Access Management Tools such as Active Directory, Azure AD Operations.
- Should be flexible to work on new technology on IAM domain.
- Worked in capacity of techno-functional role of Identity and Access Management Implementation
- Worked in client facing role.
- Good understanding of Identity Access Management solutions
- Hands-on experience or good knowledge on Active directory domain migrations will be an added advantage.
- Need to be thorough in their respective tool with hands-on experience involving configuration, implementation & customization.
- Prior experience working in remote teams on global scale.
- Implement and manage the effectiveness of Incident, Service Request, Change and Problem management processes for the service area.
- Ability to perform Root Cause Analysis and suggest solutions to avoid errors.
- Resolve technical issues through debugging, research, and investigation.
- Strong communication skills, both verbal and written
- Perform systems analysis and tuning to ensure optimal infrastructure response.
Skills and attributes for success
- Hands-on experience on end-to-end implementation of Identity and Access Management tool.
- Strong communication, presentation and team building skills and experience in producing high quality reports, papers, and presentations.
- Ability to communicate detailed technical information to a non-technical audience clearly.
- Hands on experience on tools like PKI, MFA, ADFS, Entra, QMM.
Work Requirements:
- Willingness to travel as required
- Willingness to be on call support engineer and work occasional overtime as required
- Willingness to work in shifts as required
To qualify for the role, you must have
- Bachelor or master's degree in related field or equivalent work experience
- 3-6 years of experience implementing IAM projects (Active Directory and Azure AD) and migration.
- Strong command on verbal and written English language.
- Strong interpersonal and presentation skills.
