Consulting_Digital Identity & Privileged Access Management Senior Active Directory Engineer

Ernst & Young Advisory Services Sdn Bhd; Taguig; On-site; PHP 1,200,000 - 2,300,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd in Taguig is seeking a Senior Active Directory Engineer to lead DIPAM projects, modernize AD, migrate domains, and drive IAM transformations for global clients. The role focuses on AD/Azure AD design, assessments, and implementation, with hands-on scripting in PowerShell or Python, and strong client-facing collaboration.

4–7+ years of AD/IAM experience required, with CIS/SEC awareness.

Qualifications

• 4 to 7+ years of Active Directory and IAM experience.
• Hands-on AD assessments, migrations, consolidations, and domain modernization.
• Azure AD/Entra ID administration experience.
• DNS, DHCP, GPOs, FSMO roles knowledge.
• PowerShell and/or Python scripting.
• Experience with client engagements and stakeholder communication.
• Familiarity with IAM platforms and security standards.

Responsibilities

• Lead and support AD and IAM projects across global engagements.
• Perform AD assessments, migrations, consolidations, and domain modernization activities.
• Design, implement, and support Active Directory and Azure AD environments.
• Analyze large datasets using PowerShell, Python, and Excel to identify risks and opportunities.
• Provide recommendations aligned with AD and IAM best practices.
• Work with clients to gather requirements and translate business needs into technical solutions.
• Develop technical designs, architecture documentation, and implementation plans.
• Support business development activities, RFP responses, and proposals.
• Mentor junior team members and contribute to team growth.

Skills

Active Directory

IAM

Client engagement

Mentoring

PowerShell/Python scripting

Communication

Tools

Quest AD Migration

Binary Tree

ITIM

SailPoint

Saviynt

Azure Active Directory

Job description

Consulting_Digital Identity & Privileged Access Management Senior Active Directory Engineer

Location: Taguig

Other locations: Primary Location Only

Date: Sep 24, 2026

Requisition ID: 1746213

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Join EY's Technology Consulting team and work on large-scale Digital Identity & Privileged Access Management (DIPAM) projects with global clients. This role focuses on Active Directory modernization, migrations, assessments, and IAM transformation initiatives.

Key Responsibilities

• Lead and support Active Directory and IAM projects across global engagements.
• Perform AD assessments, migrations, consolidations, and domain modernization activities.
• Design, implement, and support Active Directory and Azure AD environments.
• Analyze large datasets using PowerShell, Python, and Excel to identify risks, patterns, and optimization opportunities.
• Provide recommendations aligned with AD and IAM best practices.
• Work closely with clients and stakeholders to gather requirements and translate business needs into technical solutions.
• Develop technical designs, architecture documentation, and implementation plans.
• Support business development activities, RFP responses, and proposal development.
• Mentor junior team members and contribute to team growth and capability building.

Required Skills & Experience

• Strong hands-on experience with:
  • Active Directory domain assessments
  • Active Directory migrations, deployments, and consolidations
  • Azure Active Directory / Entra ID administration and operations
  • DNS, DHCP, Group Policies, FSMO roles
  • Authentication protocols (LDAP, Kerberos, NTLM)
  • PowerShell and/or Python scripting
• Experience using migration tools such as Quest AD Migration or Binary Tree.
• Ability to assess AD environments, identify risks, and recommend remediation strategies.
• Experience in IAM implementation, configuration, customization, and support.
• Understanding of web applications, application servers (Tomcat, WebLogic), and Windows Server environments.
• Exposure to Linux/Unix environments and shell scripting.
• Experience working directly with clients and business stakeholders.
• Strong communication and problem-solving skills.
• 4 to 7+ years of relevant experience in Active Directory and IAM technologies.

Preferred Qualifications

• Experience implementing IAM solutions in standalone and clustered environments.
• Knowledge of provisioning workflows, triggers, rules, and automation.
• Strong understanding of LDAP and identity governance concepts.
• Experience with architecture design, solution design, and requirements mapping.
• Knowledge of information security standards, controls, and compliance frameworks.
• Experience with user access certification and access review processes.
• Hands-on experience integrating IAM platforms with other identity solutions.
• Experience developing custom connectors and integrations.
• Familiarity with IAM platforms such as ITIM, SailPoint, Saviynt, or similar technologies.

What We're Looking For

• Strong technical expertise in Active Directory and Identity & Access Management.
• Ability to work in client-facing consulting engagements.
• Experience designing scalable and secure identity solutions.
• Collaborative mindset with leadership and mentoring capabilities.
• Passion for learning and adopting emerging IAM technologies.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.