IAM Product Owner role- Manager | ErnstYoung Job

Job Description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Platform Owner - IDAM & PAM Security:

Roles & Responsibilities:

• Lead Identity Security Operations and drive the evolution of the IAM technology stack, ensuring adherence to best-in-class security practices across architecture, implementation, monitoring, maintenance, and enhancements.
• Design, implement, test, and maintain secure Identity & Access Management (IAM) solutions.
• Strong expertise in Active Directory (ADDS) and Azure AD, including Disaster Recovery (DR) and Business Continuity Planning (BCP).
• Deep knowledge of Microsoft Entra ID, Zscaler Privileged Remote Access, and advanced identity governance.
• Implement Microsoft Zero Trust architecture, Privileged Access Workstation (PAW), and Zscaler Zero Trust principles along with PRA strategies.
• Solid understanding of Microsoft Defender Suite (Cloud, Identity, Endpoint, Cloud Apps), Zscaler PRA, and Cloud Security Posture Management (CSPM).
• Experience with Microsoft Sentinel (SIEM/SOAR), threat hunting, and KQL scripting.
• Proficiency in Microsoft Intune (MDM/MAM) for endpoint security.
• Strong grasp of PKI, MFA, and passwordless authentication (Windows Hello for Business).
• Familiarity with NIST, CIS benchmarks, and compliance frameworks.
• Hands-on experience in Insider Risk Management, MITRE ATT\&CK, cyber forensics, malware analysis, and reverse engineering.
• Collaborate with product owners for CyberArk or equivalent CA-PAM technologies, driving roadmap decisions and enterprise-scale adoption.
• Define and articulate design concepts for CyberArk components (vaults, safes, session managers, key managers, credential providers, integrations, auditing/reporting, and access control).
• Develop automated solutions leveraging REST APIs, PowerShell/Python scripting, GitHub, and Infrastructure-as-Code for privileged onboarding, credential rotation, and secrets management workflows.
• Enforce IAM and PAM controls across Azure and AWS integrating with native PIM capabilities and extending coverage to hybrid/multi-cloud environments.
• Design and implement enterprise Secrets Management solutions (Microsoft Entra ID, Zscaler PRA, HashiCorp Vault, CyberArk Conjur) for non-human identities, with understanding of CI/CD pipelines, GitHub, and cloud-native workloads.
• Drive AI-driven integrations with PAM, leveraging ML models and AI agents for identity and access pattern recognition.
• Identify security gaps in privileged access and secrets management processes; design scalable, automated solutions.
• Develop and support KPIs and KRIs for IAM, PAM, and Secrets Management initiatives.
• Communicate effectively with internal customers and cross-functional teams to clarify objectives, provide status updates, and influence adoption of PAM and Secrets Management best practices.
• Drive initiatives that enhance end-user experience, maximize technology value, and strengthen the organization’s security posture through measurable improvements.

Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Information Systems, or related field with 10+ years of progressive technology experience, including 8+ years in designing and implementing Cybersecurity solutions at global scale.
• Deep understanding of Identity & Access Governance with strong focus on Privileged Access Management across on-prem, cloud (Azure, AWS), and IaaS/PaaS platforms.
• Proven ability to design and implement complex IAM/PAM architectures, including integrations with SIEM/SOAR, ITSM, DevOps pipelines, and secrets management solutions.
• Broad knowledge of IAM capabilities, identity stores, authentication/authorization, strong authentication, privileged access methodologies, and Zero Trust principles.
• Hands-on experience with PowerShell, Python, and REST APIs for automation; understanding of versioning tools like GitHub and orchestration of PAM workflows and secrets management.
• Experience implementing enterprise-grade Secrets Management solutions for managing non-human identities.
• Solid experience with ADFS, Azure Entra ID, AWS IAM, databases, operating systems (Windows/Linux), application systems, and network infrastructure.
• Familiarity with AI-driven security approaches for human and non-human identities.
• Ability to prioritize and execute tasks in a fast-paced environment, balancing risk reduction with business objectives.
• Exceptional verbal and written communication skills, capable of translating complex technical concepts into clear, actionable insights for diverse stakeholders.
• Strong ability to work autonomously while influencing cross-functional teams and driving adoption of security best practices across large organizations.
• Ability to collaborate various stakeholders globally SKF business areas and regions (i.e. Regional CIO, BSIO, Cross functional Teams, Global TDA teams and partners).
• Primary Skills: Deep knowledge of Microsoft Entra ID, Delinea PAM, Zscaler Privileged Remote Access, and advanced identity governance.
• Secondary Skills: CyberArk, CA-PAM, Cisco DNAC, ISE.

EY | Building a better working world 

 
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  

 
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  

 
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.