Directory Enablement Senior Engineer EY Global Delivery Services

Directory Enablement Senior Engineer

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 250000 people in more than 140 countries all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use to the ability to work remotely on our mobile devices and connecting our people and our clients to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.

EY Technology supports our technology needs through three business units:

Client Technology (CT) - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster and pursue those opportunities more rapidly.

Enterprise Workplace Technology (EWT) EWT supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. EWT will also support our internal technology needs by focusing on a better user experience.

Information Security (Info Sec) - Info Sec prevents detects responds and mitigates cyber-risk protecting EY and client data and our information management systems.

The opportunity

As part of dynamic and highly knowledgeable teams the Directory Enablement Engineer drives the best practices in basic to complex engineering activities aligned to directory services technologies and supports the remediation and implementation directives for the technology as may be identified by or assigned to the Identity & Access Management Services (IAMS) group within Information Security. The role designs and develops said architectural elements or modifications including but not limited to integrated processes applications data and technology remediation. The role supports the need for engineered solutions from Information Technology (IT) enterprise architecture directives as determined by operational requirements from such global operations partners as Identity & Access Management Services (IAMS) within Information Security. The roles efforts maintain directory technologies (e.g. Active Directory Entra ID) and other security aligned functions and performs all work in adherence to EYs compliance standards for technology development and deployment. As part of supporting a continuous process improvement remit the role is expected to utilize a variety of modern IT systems management technologies for large complex environments including Configuration Manager Operations Manager Powerbroker Active Roles Server Sentinel reporting and scripting technologies such as PowerShell.

The roles activities are to remediate or prevent configuration drift or the misalignment of a current technical setup of hardware and software to an alignment of technology that does not support the intended IT process or service. The roles remit additionally advances the specifics of the assigned IT landscape and technologies further up the maturity curve as part of the IAM services lifecycle and as such supports technical planning for new or modified versions of all directory technologies in use by IAMS reviews new technical specifications and identifies changes or modifications all of which maintain operational readiness in directory services. The role captures changes and develops engineered solutions according to agreed specifications such as Operating Level Agreements (OLA) or Service Level Agreements (SLA) and partners with appropriate Domain peers on core components of the IT infrastructure to be aligned or augmented to accept same prior to implementation. The role provides and drives the integration of these amended services by engaging in appropriate planning of all phases of deployment as well as testing for compatibility in order to achieve an integrated architecture across interdependent technologies. The role Is recognized as a thought leader in general server aligned services within IAM as well as a specialized depth as well as breadth of engineering knowledge for directory technologies. The role is an individual contributor though may be asked to manage project aligned teams in their collaborative efforts and to coach less seasoned members of the team in complex directives. The role is guided by the Team Lead for Directory Enablement in IAMS.

Your key responsibilities

The role requires an understanding of a hybrid Identity infrastructure utilizing Microsoft Active Directory Domain Services and Microsoft Entra ID.

The role may also require the periodic allocation of additional time on the job to support multiple demands and escalating issues and could be asked to travel to support planned project activities and collaboration.

The role is generally an individual contributor but can and will operate as a lead on particular projects and therefore manage specific Active Directory engineering activities. The role may be asked to mentor and guide across time zones and cultures and maintain effective and efficient oversight of all aligned activities. The role itself is generally guided by the Team Lead for Directory Enablement as a core component within IAMS and Information Security.

Skills and attributes for success

Knowledge and Skills Requirements:

• Ability to write detailed documentation required for solution delivery for instructional content for implementing engineers as well as operational content and diagrams for support engineers.
• Maintains solid interpersonal skills to engage with others including senior executives of the firm in cross business discussions within a matrixed geographically dispersed organization and to build a solid network of peers and others of influence. Adapts personal communication style to the style of others develops rapport stay calm under pressure and escalating issues using advanced oral and written English communication skills.
• Projects well-defined consultative skill to conduct effective questioning hone in on key directives to formulate ideas and materials as well as present those ideas clearly and concisely to all levels of the organization including senior and/or executive management.
• Maintains an advanced comprehensive knowledge of services and applications with the future and forward vision of the IAM processes and operating environment to recognize and position improvement opportunities and next generation solutions achievable through engineering or other technical solutions.
• Manifests a strong analytical and problem-solving ability to escalate and negotiate complex and conflicting IAM or Information Security aligned engineering issues handle multiple and shifting IAM engineering priorities across a broad spectrum of operating environments and drive solutions that are both financially sound and operationally feasible.
• Develops an in depth and continuous understanding of EYs business and the way IAMS Engineering teams adds to the effectiveness of the EY business. Positions appropriate services and solutions as part of both knowledge sharing and Directory Enablement services positioning.
• Manage engineering projects by operating within best practices or delegate work as needed utilizing the proper resource time and project management disciplines across a diverse culture and multiple time zones.
• Maintains a continuous review of aligned applications and software servers and networks aligned to the IAM and directory environments including but not limited to the Systems Center Operations Manager Administration Windows 2016 and 2022 Administration and Infrastructure perimeter networks (DMZ) Single Sign-On (SSO) configuration and remediation and Lightweight Directory Access Protocol (LDAP).
• Maintains advanced and continuous knowledge of the ancillary technologies to be engineered such as Lightweight Directory Services (LDS) Rights Management Systems (RMS) as part of the IAM services to support the time sensitive management monitoring and automation of Tier 0 technologies and other directives and drive continuous improvement.

To qualify for the role you must have

• College degree in related technology field (Computer Engineering Science etc.) or comparable job experiences aligned to Active Directory and/or IAM engineering directives
• Approximately 8 to 10 years of experience in an engineering role. Able to exhibit a progression of increasingly complex job responsibilities during the period inclusive of project management skills engineering remediation techniques and project planning and implementation.
• Certification as a Microsoft Certified Systems Administrator (MCSA)
• Certification as a Microsoft Certified Solution Expert (MCSE) Core Infrastructure or Productivity
• 10 years Active Directory
• 2 years Azure AD
• 4 years PowerShell scripting

Ideally youll also have

• Understanding and experience with Azure managed services.
• Understanding and experience with Cloud service providers such as AWS.
• Understanding and experience with System Center Configuration Manager.
• Powerbroker
• Active Roles Server
• Splunk and/or Sentinel

What we look for

Our Ideal candidate is an accomplished self-starter who shares our passion for technology.

What working at EY offers

We offer a competitive remuneration package where youll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development and with FlexEY you can select benefits that suit your needs covering holidays health and well-being insurance savings and a wide range of discounts offers and promotions. Plus we offer:

• Support coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way thats right for you