Consulting_Digital Identity & Privileged Access Management Senior Active Directory Engineer

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. Join EY's Technology Consulting team and work on large-scale Digital Identity & Privileged Access Management (DIPAM) projects with global clients. This role focuses on Active Directory modernization, migrations, assessments, and IAM transformation initiatives. Key Responsibilities Lead and support Active Directory and IAM projects across global engagements. Perform AD assessments, migrations, consolidations, and domain modernization activities. Design, implement, and support Active Directory and Azure AD environments. Analyze large datasets using PowerShell, Python, and Excel to identify risks, patterns, and optimization opportunities. Provide recommendations aligned with AD and IAM best practices. Work closely with clients and stakeholders to gather requirements and translate business needs into technical solutions. Develop technical designs, architecture documentation, and implementation plans. Support business development activities, RFP responses, and proposal development. Mentor junior team members and contribute to team growth and capability building. Required Skills & Experience Strong hands-on experience with: Active Directory domain assessments Active Directory migrations, deployments, and consolidations Azure Active Directory / Entra ID administration and operations DNS, DHCP, Group Policies, FSMO roles Authentication protocols (LDAP, Kerberos, NTLM) PowerShell and/or Python scripting Experience using migration tools such as Quest AD Migration or Binary Tree . Ability to assess AD environments, identify risks, and recommend remediation strategies. Experience in IAM implementation, configuration, customization, and support. Understanding of web applications, application servers (Tomcat, WebLogic), and Windows Server environments. Exposure to Linux/Unix environments and shell scripting. Experience working directly with clients and business stakeholders. Strong communication and problem-solving skills. 4 to 7+ years of relevant experience in Active Directory and IAM technologies. Preferred Qualifications Experience implementing IAM solutions in standalone and clustered environments. Knowledge of provisioning workflows, triggers, rules, and automation. Strong understanding of LDAP and identity governance concepts. Experience with architecture design, solution design, and requirements mapping. Knowledge of information security standards, controls, and compliance frameworks. Experience with user access certification and access review processes. Hands-on experience integrating IAM platforms with other identity solutions. Experience developing custom connectors and integrations. Familiarity with IAM platforms such as ITIM , SailPoint , Saviynt , or similar technologies. What We're Looking For Strong technical expertise in Active Directory and Identity & Access Management. Ability to work in client-facing consulting engagements. Experience designing scalable and secure identity solutions. Collaborative mindset with leadership and mentoring capabilities. Passion for learning and adopting emerging IAM technologies. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.