DE-Cloud Infra-IAM Architect-BFA-GDSF02

At EY youll have the chance to build a career as unique as you are with the global scale support inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better too. Join us and build an exceptional experience for yourself and a better working world for all.

Career Family-Cloud Infra Windows Platform IAM Architect

The opportunity

We are the only professional services organization who has a separate business dedicated exclusively to the financial services marketplace. Join Digital Engineering Team and you will work with multi-disciplinary teams from around the world to deliver a global perspective. Aligned to key industry groups including Asset management Banking and Capital Markets Insurance and Private Equity Health Government Power and Utilities we provide integrated advisory assurance tax and transaction services. Through diverse experiences world-class learning and individually tailored coaching you will experience ongoing professional development. Thats how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders and in so doing play a critical role in building a better working world for our people for our clients and for our communities. Sound interesting Well this is just the beginning. Because whenever you join however long you stay the exceptional EY experience lasts a lifetime.

We are seeking an experienced Cloud Architect / Infrastructure Manager with 810 years of expertise in Identity and Access Management (IAM) Windows platforms and multi cloud technologies across Azure AWS and this role you will architect and modernize enterprise identity strategies lead large scale Windows and infrastructure transformations and drive hybrid cloud integration across global environments. As the Infra Support Manager you will lead a high performing team of Infra and SRE engineers to deliver stable secure resilient and automated cloud and on prem platforms. You will be accountable for operational excellence engineering maturity proactive risk management and continuous improvement initiatives. This role requires close collaboration with CXOs architects and global stakeholders to ensure secure compliant and scalable identity and infrastructure services that accelerate enterprise cloud adoption while empowering your team through coaching mentoring and performance excellence.

EY Digital Engineering is a unique industry-focused business unit that provides a broad range of integrated services that leverage deep industry experience with strong functional capability and product knowledge. The Digital Engineering practice works with clients to analyse formulate design mobilize and drive digital transformation initiatives. We advise clients on their most pressing digital challenges and opportunities surround business strategy customer growth profit optimization innovation technology strategy and digital transformation. We also have a unique ability to help our clients translate strategy into actionable technical design and transformation planning/mobilization. Through our unique combination of competencies and solutions EYs DE team helps our clients sustain competitive advantage and profitability by developing strategies to stay ahead of the rapid pace of change and disruption and supporting the execution of complex transformations

Your key responsibilities

Architecture Strategy & Platform Modernization

• Define and drive enterprise infrastructure and identity strategy across multicloud environments (Azure AWS GCP).
• Architect and modernize Windows Server AD/Azure AD hybrid identity and federation services.
• Establish Zero Trust principles conditional access models privileged identity controls and hybrid integration patterns.
• Partner with architecture teams to influence platform decisions capacity planning scaling and modernization roadmaps..

Operational Ownership & Service Reliability

• Own end to end service uptime performance availability and reliability metrics across cloud and on premise platforms.
• Define monitor and report SLOs/SLIs operational KPIs observability maturity and incident metrics.
• Lead major incident management coordinate cross functional resolution and ensure high quality RCA outcomes.
• Build proactive maintenance strategies reliability roadmaps and operational maturity frameworks.

Platform Engineering & Automation

• Lead lifecycle management of AD Azure AD PKI Group Policies Windows workloads and identity platforms.
• Drive automation-first engineering using Terraform Ansible PowerShell and InfraasCode.
• Sponsor initiatives that eliminate toil improve speed enhance stability and increase environment consistency.
• Lead adoption of DevOps/SRE practices GitOps models and bestinclass observability solutions.

Security Governance & Compliance

• Implement IAM governance RBAC least privilege MFA/SSO and continuous access evaluation.
• Ensure compliance with security standards (NIST ISO CIS) and partner with security teams for DevSecOps alignment.
• Oversee adherence to ITSM processes (Incident Problem Change) audit readiness and risk controls.
• Standardize documentation including runbooks SOPs operational guidelines and compliance processes.

Migration Transformation & Cloud Adoption

• Lead identity migrations AD consolidation and transitions from legacy Windows environments to modern hybrid identity solutions.
• Drive enterprise cloud adoption initiatives integrating identity security and infrastructure with Azure AWS and GCP workloads.
• Enable adoption of modern authentication (MFA conditional access passwordless) across the enterprise.

Leadership & Collaboration

• Develop Infra/SRE engineers and guide global senior engineers and architects in applying best practice architecture standards.
• Lead mentor and upskill Infra/SRE engineers while guiding senior engineers and architects globally on best practice architecture standards.
• Promote a culture of accountability collaboration operational excellence and continuous learning.
• Collaborate with CXOs application owners cloud teams cybersecurity and cross functional stakeholders.
• Act as a key point of contact for service health escalations operational reviews audits and client interactions.
• Represent the organization in customer partner and industry forums as a technical leader.

Skills and attributes for success

Required Skills

• 810 years of IT experience with deep expertise in IAM Windows platforms Linux/Unix cloud infrastructure (Azure/AWS/GCP) and hybrid environment operations.
• 35 years of leadership experience managing Infra/SRE teams driving 24x7 operations and leading crossfunctional technical discussions.
• Strong handson capability in automation & IaC (Python/Shell/Bash PowerShell Terraform Ansible GitOps CI/CD tools) and proven ability to reduce toil and improve operational efficiency.
• Demonstrated expertise in SRE practices including SLO/SLI definition observability incident management RCA quality and improving MTTR/monitoring maturity.
• Deep knowledge of identity authentication & security frameworksAzure AD/AD MFA SSO federation Zero Trust RBAC compliance patching and vulnerability management.
• Strong experience in cloud & onprem modernization including migrations upgrades lifecycle management DR planning (RPO/RTO) and multiregion cloud operations.
• Proficient with monitoring and observability ecosystems (Prometheus Grafana Splunk Dynatrace ELK CloudWatch/App Insights) and defining alerting & service health standards.
• Excellent communication documentation stakeholder management and decisionmaking skills with proven ability to lead global teams and collaborate across time zones..

Preferred Qualifications

• Certifications: Microsoft Certified: Identity & Access Administrator / Enterprise Administrator Expert TOGAF.
• Experience with PAM solutions (CyberArk BeyondTrust) and advanced identity governance (SailPoint Okta Ping).
• Pre-sales or consulting background for enterprise identity transformation.

Education:

• Degree: Bachelors degree in Computer Science Engineering Information Technology or a related field or equivalent practical experience

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations Argentina China India the Philippines Poland and the UK and with teams from all EY service lines geographies and sectors playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants we offer a wide variety of fulfilling career opportunities that span all business GDS you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. Well introduce you to an ever-expanding ecosystem of people learning skills and insights that will stay with you throughout your career.

• Continuous learning: Youll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: Well provide the tools and flexibility so you can make a meaningful impact your way.
• Transformative leadership: Well give you the insights coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: Youll be embraced for who you are and empowered to use your voice to help others find theirs.

EY Building a better working world

EY exists to build a better working world helping to create long-term value for clients people and society and build trust in the capital markets.

Enabled by data and technology diverse EY teams in over 150 countries provide trust through assurance and help clients grow transform and operate.

Working across assurance consulting law strategy tax and transactions EY teams ask better questions to find new answers for the complex issues facing our world today.