Senior Identity & Endpoint Security Administrator

EY; Taguig; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

EY, a leading professional services firm, is seeking an IAM Engineer in the Philippines to support management and implementation of enterprise devices using Intune and Defender. You will ensure device compliance, security, and smooth operation while assisting in troubleshooting and incident response.

Responsibilities include enrolling devices, configuring baselines, deploying apps, Autopilot support, and monitoring security posture.

Qualifications

• Hands-on experience with Intune device management and OS/app deployments.
• Experience configuring Defender for Endpoint and security policies.
• Experience creating or managing endpoint conditional access policies.
• Knowledge of Azure AD/Entra ID concepts for endpoints.
• Understanding Windows OS administration and endpoint security fundamentals.
• Ability to troubleshoot endpoint and policy-related issues.

Responsibilities

• Manage and support device enrollment across Windows, iOS, and Android.
• Configure and maintain configuration, compliance, and security baselines.
• Deploy and manage apps with policies (Win32, Microsoft 365 apps, mobile).
• Support Autopilot deployments and provisioning troubleshooting.
• Monitor device compliance and policy deployments.
• Configure Windows Defender policies and EDR capabilities.
• Patch management via Windows Update for Business.
• Maintain documentation of configurations and policies.
• Collaborate with support teams to troubleshoot issues.
• Monitor Defender portal for device risk and security posture.
• Identify recurring issues and suggest policy improvements.
• Optimize configurations to reduce user impact and improve security.

Skills

Intune compliance

Defender for Endpoint

Conditional Access

Azure AD/Entra ID

Windows OS security

Troubleshooting endpoints

Job description

EY, a leading professional services firm, is seeking an IAM Engineer in the Philippines to support management and implementation of enterprise devices using Intune and Defender. You will ensure device compliance, security, and smooth operation while assisting in troubleshooting and incident response.

Responsibilities include enrolling devices, configuring baselines, deploying apps, Autopilot support, and monitoring security posture.