IAM Directory Implementation Engineer - Supervising Associate | ErnstYoung Job

Job Description

IAM Directory Implementation Engineer – Supervising Associate

Location: Wrocław / Katowice - 2 days in office / 3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The Active Directory & Entra ID Engineer has responsibilities to implement, configure and maintain the IAMS instance of Active Directory and Cloud Infrastructre. This individual will assist to manage end-to-end aspects of the services including but not limited to production infrastructure deployment, troubleshooting, standards, vendor management, and day-to-day configuration. Other responsibilities include drivings stability, disaster recovery, monitoring along with the resolution of incidents and problems, maintenance support, application platform change control, and automation of processes and procedures. This individual will work closely with other teams within EY to drive technology standards and consistency across IT Services.

EY Technology:

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 250,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day.  Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients.  Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.

The opportunity

As part of the Identity and Access Management organization, this individual will support and manage all end-to-end aspects of the Active Directory and Cloud services. The individual will implement, automate and support secure directory services across Active Directory, Microsoft Entra ID and hybrid identity environments.

This will include building infrastructure, deploying servers and configuration changes to the environment. The Engineer provides support, implementation, and design services for Microsoft Active Directory and Azure Active Directory across the enterprise, including directory and identity management solutions. Resolves and appropriately completes assigned cases and change requests and acts as an escalation for support issues. Other responsibilities include driving stability and security and remediation of potential security vulnerabilities. This individual will work closely with other teams within EY to drive technology standards and consistency across IT Services.

The role combines traditional directory engineering skills with delivery of security-hardening and modernization initiatives, including Tier 0 controls, delegated access, service account and non-human identity management, group managed service accounts, domain controller and operating system upgrades, Entra role governance, recovery capabilities and directory automation.

The engineer will work with Engineering, Architecture, Operations, Infrastructure, Cloud, Security and application teams to deliver resilient, least-privileged and supportable directory capabilities.

Your key responsibilities

• Ability to plan, implement production deployment activities and scope work efforts in alignment to project
• Excellent communication skills and confidence to identify, negotiate and mitigate difficult circumstances (e.g., Handling mission critical production deployments, taking ownership of escalated production outage incidents from other infrastructure teams).
• Execute systematic security assessments of Active Directory and Azure using tools like Microsoft OnDemand Assessment to identify security risks.
• Ensure the successful technical delivery of Information Security projects and services by working directly with Project Manager, Architecture, Security Consultants, and various other teams.
• Review detailed implementation plans in regards to infrastructure change,
• Ability to communicate solutions, ideas, suggestions to a variety of (business) stakeholders effectively and comprehensively.
• Ability to carry out resolutions as they relate to service disruptions and problems
• Ability to work well within a multi-disciplinary team structure, but also independently
• Ability to work with vendors (Microsoft, Dell, Hp etc.) for escalation of service issues
• Manage customer satisfaction through effectively communicating
• Demonstrates analytical and systematic approach to problem solving.
• Ability to rapidly absorb new technical information, business acumen and apply it effectively.
• Knowledge of the broader field of information systems, its use in relevant employment areas and how it relates to business activities
• Implement and validate directory security baselines, least-privilege controls and delegated administration models.
• Support Tier 0 security, administrative tiering, privileged access workstations and secure management paths.
• Implement or enhance controls such as LAPS, protected accounts, authentication policies, cipher hardening and privileged role reduction.
• Experience with Windows Server 2022 upgrades, security baselines, LAPS, WDAC or Microsoft Defender for Endpoint.
• Support security assessments, attack-path remediation, vulnerability remediation and audit evidence collection.
• Work with security tools such as Microsoft Defender for Identity, Silverfort or comparable identity threat protection platforms.
• Maintain lifecycle controls for service accounts, gMSAs, application identities and other non-human identities.
• Support ownership, attestation, necessity validation, naming, description and standards compliance for directory objects.
• Administer and engineer Active Directory forests, domains, organizational units, sites, trusts, replication, DNS and Group Policy.
• Maintain Active Directory forest recovery and cyber recovery capabilities, ensuring alignment with business continuity and security requirements.
• Configure and support Microsoft Entra ID and hybrid identity components, including Microsoft Entra Connect.
• Maintain automation solutions using PowerShell to reduce manual administration, improve consistency and support directory modernization initiatives.
• Troubleshoot authentication, replication, synchronization, directory object and policy issues.
• Implement secure standards for users, groups, computers, service accounts and privileged identities.
• Support directory integrations using LDAP, Kerberos, NTLM, DNS and related protocols.

Skills and attributes for success

• Excellent collaboration, interpersonal and communication skills
• Fluent in English language - written and verbal
• Knowledge and understanding of Information Security, Identity & Access Management (IAM), Active Directory Domain Services and Microsoft Entra ID
• Experience in deploying or migrating IAM solutions, including Active Directory, Azure Active Directory etc. within production environments.
• Hands-on experience with Group Policy, DNS, LDAP, Kerberos, trusts, replication and privileged group management.
• Should be familiar with AD Migration / Upgrade methods, AD Performance, Scalability, availability, and DR concepts.
• Understanding of Tier 0, least privilege, privileged access, service accounts, gMSAs and non-human identity security.
• Experience using PowerShell for directory administration, automation and reporting.
• Should be able to participate in L4 escalations in SME capability and should be able to provide sound reasoning and conduct RCA during problem investigation meetings.
• Extensive experience in large scale Azure cloud-based application solutions and integration with other Cloud or On-premises products and custom solutions
• Knowledge of Windows Server administration, security baselines, patching and controlled infrastructure change.
• Knowledge of one or more automation and scripting languages such as PowerShell, Visual Basic, Power Automate etc.
• Familiarity with Active Directory security hardening concepts, including tiered security, privileged access workstations (PAWs), administrative forests, and just-in-time access
• Experience in one or more of these areas is desirable (SCCM, SCOM, RMAD, Splunk, ARS, Shielded VM / Hyper-V, ADLDS, IPSec)
• ITIL Foundation Certification
• Flexibility in scheduling with a willingness to work extra non-standard hours
• Ability to deal efficiently with challenging situations such as restoring services
• Ability to work well within a multi-disciplinary, multi-cultural team structure, but also independently
• Ability to meet deadlines with demonstrable productivity
• Strong documentation, testing, risk awareness and stakeholder communication skills.
• Some travel may be required based on project or team requirements

To qualify for the role, you must have

• Degree in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent practical experience.
• 4 to 6 years of experience in Directory services, Microsoft Entra ID, Windows infrastructure, IAM engineering
• Hands-on experience administering Active Directory and supporting Microsoft Entra ID or hybrid identity.
• Experience with PowerShell scripting and production Change Management.
• Experience implementing technical controls across development, test and production environments.

Ideally, you’ll also have

Certifications in Active Directory and Cloud Infrastructures and understanding of core Microsoft technologies. A plus would be experience with Quest Change Auditor, SCCM, Splunk, RMAD and Active Roles Server.

What we look for

The Active Directory/Cloud Infrastructure Engineer has responsibilities to implement, configure, manage, and troubleshoot issues within the environment. This will include working closely with other teams to deploy new technologies, enhancements and maintain a stable and secure infrastructure.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations –  Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.