DE-Cloud Infra-IAM Engineer-BFA-GDSF02

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Career Family: Cloud Infra _Windows Platform IAM Engineer Role Rank: Senior

The opportunity We are the only professional services organization who has a separate business dedicated exclusively to the financial services marketplace. Join Digital Engineering Team and you will work with multi-disciplinary teams from around the world to deliver a global perspective. Aligned to key industry groups including Asset management, Banking and Capital Markets, Insurance and Private Equity, Health, Government, Power and Utilities, we provide integrated advisory, assurance, tax, and transaction services. Through diverse experiences, world-class learning and individually tailored coaching you will experience ongoing professional development. That’s how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders, and in so doing, play a critical role in building a better working world for our people, for our clients and for our communities. Sound interesting? Well, this is just the beginning. Because whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. We are looking for a Senior Engineer with 4–6 years of IT experience and strong expertise in Identity and Access Management (IAM), Windows Server platforms, and multi-cloud integration (Azure, AWS, GCP). In this role, you will design, implement, and manage secure and scalable identity solutions, modernize Active Directory environments, and support enterprise hybrid cloud adoption. You will also drive automation, enforce compliance, and collaborate closely with architects, developers, and security teams to deliver enterprise-grade solutions. EY Digital Engineering is a unique, industry-focused business unit that provides a broad range of integrated services that leverage deep industry experience with strong functional capability and product knowledge. The Digital Engineering practice works with clients to analyse, formulate, design, mobilize and drive digital transformation initiatives. We advise clients on their most pressing digital challenges and opportunities surround business strategy, customer, growth, profit optimization, innovation, technology strategy, and digital transformation. We also have a unique ability to help our clients translate strategy into actionable technical design, and transformation planning/mobilization. Through our unique combination of competencies and solutions, EY’s DE team helps our clients sustain competitive advantage and profitability by developing strategies to stay ahead of the rapid pace of change and disruption and supporting the execution of complex transformations

Your Key Responsibilities - Environment & Platform Ownership - Lead day to day management of on prem and cloud environments, ensuring stable provisioning, configuration, and operational best practices. - Provide SME level guidance on architecture, platform optimization, and cross platform integrations. - Identity & Windows Platform Management

• Manage and optimize IAM and Windows platforms including Active Directory, ADFS, Azure AD, AWS IAM, Google Identity, AD DS, DNS, DHCP, GPO, PKI.
• Implement and support SSO, MFA, Conditional Access, federation, and hybrid identity integrations for SaaS and on prem applications.
• Incident, RCA & Operational Leadership + Own high priority technical incidents, lead major incident bridges, and drive swift service restoration. + Deliver detailed RCA with corrective and preventive actions, ensuring operational excellence.
• Reliability, Monitoring & SRE Practices + Improve service reliability through proactive monitoring, trend analysis, observability enhancements, and SLO/SLI tracking. + Reduce MTTR and strengthen uptime through SRE methodologies and data driven insights.
• Automation, IaC & Cloud Integration + Architect and implement automation using PowerShell, Terraform, Ansible, Python/Shell. + Drive IaC, GitOps, config drift controls, self healing mechanisms, and automated policy enforcement across cloud and identity workloads.
• Modernization, Migration & Lifecycle Management + Lead modernization programs, platform upgrades, identity transformations, cloud migrations, and EOL remediation efforts. + Conduct dependency mapping, cutover planning, post migration validation, and maintain updated asset inventories.
• Security, Compliance & Governance + Enforce RBAC, least privilege, Zero Trust, and configuration standards across all platforms. + Ensure compliance with ISO, CIS, NIST, maintain audit readiness, and uphold ITSM processes (Incident, Problem, Change).
• Collaboration, Mentoring & Stakeholder Engagement + Partner with architects, application teams, cybersecurity, and cloud teams to deliver secure and scalable solutions. + Provide L3 technical support, mentor junior engineers, conduct code reviews, and develop high quality runbooks, SOPs, and knowledge sharing assets. + Present operational insights and reliability metrics to leadership to support data driven decisions.

Required Skills Skills and attributes for success

• 4–6 years of core experience across IAM, Windows, Linux/Unix, and Cloud, including AD/ADFS, Azure AD, AWS IAM, Google Identity, Windows Server, GPO, and PKI.
• Expert level Linux/Unix administration, including deep kernel tuning, performance debugging, advanced filesystem analysis, and OS level troubleshooting.
• Strong cloud engineering expertise across Azure/AWS/GCP—covering networking, compute, storage, IAM, hybrid connectivity, and platform security.
• Advanced scripting & automation engineering using Shell, Bash, Python, PowerShell, Terraform, and Ansible, with ability to build reusable automation frameworks.
• Advanced patching & vulnerability management, including patch strategy design, automated patch cycles, remediation workflows, and compliance enforcement.
• SRE driven reliability engineering, including SLO/SLI definition, error budgets, chaos testing exposure, proactive monitoring, MTTR reduction, and systemic issue elimination.
• Strong observability & monitoring expertise using Azure Monitor, CloudWatch, Splunk, Prometheus, Grafana, ELK, Dynatrace—able to build dashboards, alerting standards, and log pipelines.
• Security & compliance grounding, including Zero Trust, RBAC, least privilege, MFA/SSO, federation, NIST/ISO/CIS benchmarks, and audit readiness.
• Hands on migration & modernization experience, including provisioning workflow optimization, Windows/IAM/cloud migrations, EOL remediation, lifecycle upgrades, and environment cutovers.

Preferred Qualifications

• Certifications: Microsoft Certified: Identity & Access Administrator / Enterprise Administrator Expert.
• Familiarity with Okta, Ping Identity, CyberArk, or other IAM platforms.
• Experience in hybrid identity governance and compliance programs.

Education:

• Degree: Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent practical experience

What We Offer EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations – Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.