Consulting_Digital Identity & Privileged Access Management Senior Endpoint Administrator

EY; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

EY Philippines seeks an IAM professional to support deployment and management of enterprise devices with Intune and Defender, ensuring compliance, security, and efficient incident response.

You will work on Identity & Access Management projects, collaborate with client teams, mentor junior staff, and help optimize configurations to minimize user impact while enhancing security.

Qualifications

• Hands-on experience with Intune deployments (compliance, configurations, updates).
• Hands-on experience with Defender for Endpoint configuration and alert handling.
• Experience creating or managing endpoint conditional access policies.
• Azure AD / Entra ID concepts for endpoints.
• Understanding Windows OS administration and endpoint security fundamentals.
• Ability to troubleshoot endpoint and policy-related issues.

Responsibilities

• Manage and support device enrollment and policy deployment.
• Configure and maintain security baseline and Defender policies.
• Support Intune integration with Conditional Access.
• Deploy and manage apps with policies.
• Monitor and resolve device compliance and security posture.
• Collaborate with cross-functional teams and client stakeholders.
• Maintain documentation and reports for configurations.

Skills

Intune compliance

Defender for Endpoint

Conditional access policies

Azure AD / Entra ID

Windows OS administration

Troubleshoot endpoint issues

PowerShell

KQL

SCCM Co-management

Zero Trust

Change Management

Job description

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Job purpose

Supports management or implementation of enterprise devices using Intune and Defender, ensuring devices are compliant, secure, and operational while assisting in troubleshooting and incident response.

• Manage and support device enrollment (Windows, iOS, Android).
• Configure and maintain configuration, compliance, and security baseline.
• Support integration of Intune compliance with Conditional Access
• Deploy and manage applications (Win32, Microsoft 365 apps, mobile apps) with policies.
• Support Autopilot deployments and troubleshoot provisioning issues
• Monitor and resolve device compliance and policy deployment issues
• Configure and maintain Windows Defender antivirus policies, Attack Surface Reduction, and Endpoint Detection and Response.
• Support in device isolation, remediation, and threat response.
• Patch Management using Windows Update for Business.
• Maintain documentation for configurations and policies.
• Collaborating with other support team to troubleshoot issues.
• Monitor proactively for device risk levels and security posture in the Defender portal.
• Identify recurring issues and suggest improvements to policies and procedures.
• Assist in optimizing configurations to reduce user impact and improve security.

Your client responsibilities

• Engage and contribute to the Identity & Access Management projects
• Work effectively as a team member, sharing responsibility, providing support, maintaining communication and updating senior team members on progress
• Execute the engagement requirements, along with review of work by junior team members
• Help prepare reports and schedules that will be delivered to clients and other interested parties
• Develop and maintain productive working relationships with client personnel
• Build strong internal relationships within EY Consulting Services and with other services across the organization
• Help senior team members in performance reviews and contribute to performance feedback for staff/junior level team members
• Contribute to people related initiatives including recruiting and retaining IAM professionals
• Maintain an educational program to continually develop personal skills of staff
• Understand and follow workplace policies and procedures

Your people responsibilities

• Building a quality culture at GDS
• Help senior team members in performance reviews and contribute to performance feedback for staff/junior level team members
• Manage the performance management for the direct reportees, as per the organization policies
• Foster teamwork and lead by example
• Training and mentoring of project resources
• Participating in the organization-wide people initiatives
• Excellent leadership skills

Mandatory Skills

• Hands-on experience with Microsoft Intune's compliance, configurations, application, and update deployments.
• Hands-on experience with Defender for Endpoint basic to intermediate configuration and alert handling.
• Experience in creating or managing endpoint conditional access policies.
• Azure AD and Entra ID concepts for endpoint.
• Understanding of Windows OS administration and endpoint security fundamentals.
• Ability to troubleshoot endpoint and policy-related issues.

Preferred Skills

• Experience in integrating Defender for Endpoint with Intune.
• Knowledge in KQL and PowerShell (device management).
• SCCM Co-management
• Knowledge in Zero Trust security principles.
• Change Management

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.