Consulting_Digital Identity & Privileged Access Management Senior Active Directory Engineer

EY; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

EY's Technology Consulting team seeks an experienced AD/IAM professional to manage global Active Directory modernization and Azure AD initiatives. You'll analyze large datasets, design scalable identity solutions, and guide clients through migrations in a dynamic consulting setting.

Join EY to influence AD/IAM strategies, mentor juniors, and contribute to winning proposals while shaping secure, modern identity infrastructures across large-scale deployments.

Qualifications

• Strong hands-on experience with AD assessments, migrations, and consolidation.
• Experience in Azure AD/Entra ID administration and operations.
• Proficient in PowerShell or Python scripting for data analysis and automation.
• Ability to design, implement and support AD/IAM environments at scale.
• Experience with client-facing engagements and requirement gathering.

Responsibilities

• Lead and support Active Directory and IAM projects across global engagements.
• Perform AD assessments, migrations, consolidations, and domain modernization activities.
• Design, implement, and support AD and Azure AD environments.
• Analyze datasets with PowerShell, Python, and Excel to identify risks and opportunities.
• Provide remediation recommendations aligned with AD/IAM best practices.
• Collaborate with clients to translate business needs into technical solutions.
• Develop architectural designs, implementation plans, and project documentation.
• Contribute to business development, RFP responses, and proposal development.
• Mentor junior team members and support capability building.

Skills

Active Directory

IAM

Azure Active Directory

PowerShell

Python

DNS/DHCP

Group Policies

Kerberos/NTLM

AD migrations

AD deployments

Tools

Quest AD Migration

Binary Tree

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Join EY's Technology Consulting team and work on large-scale Digital Identity & Privileged Access Management (DIPAM) projects with global clients. This role focuses on Active Directory modernization, migrations, assessments, and IAM transformation initiatives.

Key Responsibilities

• Lead and support Active Directory and IAM projects across global engagements.
• Perform AD assessments, migrations, consolidations, and domain modernization activities.
• Design, implement, and support Active Directory and Azure AD environments.
• Analyze large datasets using PowerShell, Python, and Excel to identify risks, patterns, and optimization opportunities.
• Provide recommendations aligned with AD and IAM best practices.
• Work closely with clients and stakeholders to gather requirements and translate business needs into technical solutions.
• Develop technical designs, architecture documentation, and implementation plans.
• Support business development activities, RFP responses, and proposal development.
• Mentor junior team members and contribute to team growth and capability building.

Required Skills & Experience

• Strong hands-on experience with:
  • Active Directory domain assessments
  • Active Directory migrations, deployments, and consolidations
  • Azure Active Directory / Entra ID administration and operations
  • DNS, DHCP, Group Policies, FSMO roles
  • Authentication protocols (LDAP, Kerberos, NTLM)
  • PowerShell and/or Python scripting
• Experience using migration tools such as Quest AD Migration or Binary Tree.
• Ability to assess AD environments, identify risks, and recommend remediation strategies.
• Experience in IAM implementation, configuration, customization, and support.
• Understanding of web applications, application servers (Tomcat, WebLogic), and Windows Server environments.
• Exposure to Linux/Unix environments and shell scripting.
• Experience working directly with clients and business stakeholders.
• Strong communication and problem-solving skills.
• 4 to 7+ years of relevant experience in Active Directory and IAM technologies.

Preferred Qualifications

• Experience implementing IAM solutions in standalone and clustered environments.
• Knowledge of provisioning workflows, triggers, rules, and automation.
• Strong understanding of LDAP and identity governance concepts.
• Experience with architecture design, solution design, and requirements mapping.
• Knowledge of information security standards, controls, and compliance frameworks.
• Experience with user access certification and access review processes.
• Hands-on experience integrating IAM platforms with other identity solutions.
• Experience developing custom connectors and integrations.
• Familiarity with IAM platforms such as ITIM, SailPoint, Saviynt, or similar technologies.

What We're Looking For

• Strong technical expertise in Active Directory and Identity & Access Management.
• Ability to work in client-facing consulting engagements.
• Experience designing scalable and secure identity solutions.
• Collaborative mindset with leadership and mentoring capabilities.
• Passion for learning and adopting emerging IAM technologies.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.