Windows Compliance SME - Enterprise-Scale & Automation

EY; Taguig; Sur place; PHP 1 040 000 - 1 430 000; Plein temps

Résumé du poste

EY seeks a Windows & Linux Compliance SME to manage global on-premises Windows Server governance, vulnerability remediation and configuration baselines across large estates. You will lead technical efforts on AD, GPOs, PS automation and integration with SCCM and orchestration tools in a hybrid environment.

Ideal candidates have extensive Windows Server experience, strong scripting (PowerShell, WMI, Python) and familiarity with DevOps practices, changes, risk and audit reporting.

Qualifications

• Advanced hands-on administration and compliance experience with Windows Server 2019, 2022 and 2025 in large, globally distributed production environments.
• Expert knowledge of Active Directory, Group Policy design and management, domain and forest structures, authentication, service accounts and privileged-access controls.
• Proven experience assessing security risk, remediating Windows Server vulnerabilities, applying security baselines and tuning systems securely without compromising service availability.
• Deep scripting and automation capability in PowerShell, WMI and Python; experience with Ansible is required, while VBS and Perl knowledge is beneficial for legacy environments.
• Strong experience administering Microsoft Configuration Manager and packaging and deploying software, scripts, updates and remediation controls at enterprise scale.

Responsabilités

• Serve as the compliance SME for the global on-premises Microsoft Windows Server estate, supporting environments at enterprise scale.
• Monitor security advisories, vulnerability findings, OS alerts and vendor notifications to identify exposure in Windows Server 2019, 2022 and 2025.
• Engineerm, package, test and coordinate large-scale remediation for security vulnerabilities and configuration changes using SCCM, PowerShell and Ansible.
• Design, implement and maintain Group Policy Objects and verify consistent application across Active Directory forests and domains.
• Prepare implementation plans, validation steps, rollback plans and stakeholder communications for compliance deployments.
• Maintain compliance records covering server inventory, patch status, lifecycle, vulnerabilities and evidence.

Connaissances

Windows Server

Active Directory

PowerShell

Group Policy

Ansible

Formation

Bachelor’s degree in CS/IT/Engineering

Outils

Power BI

ServiceNow

SharePoint

VMware ESXi

Nutanix AHV

Hyper-V

Dell OpenManage

Azure Arc

Description du poste

EY seeks a Windows & Linux Compliance SME to manage global on-premises Windows Server governance, vulnerability remediation and configuration baselines across large estates. You will lead technical efforts on AD, GPOs, PS automation and integration with SCCM and orchestration tools in a hybrid environment.

Ideal candidates have extensive Windows Server experience, strong scripting (PowerShell, WMI, Python) and familiarity with DevOps practices, changes, risk and audit reporting.