Senior Consultant - Active Directory & Entra ID Expert

EY; Warszawa; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model

Private healthcare

Qualifications support

Job summary

EY Poland seeks a Senior Consultant specializing in Entra ID and Active Directory, to design and optimize cloud-first and hybrid identity solutions. You will lead IAM implementations, governance, and security hardening with Entra ID and on‑prem AD as a supporting element.

You will guide hybrid identity architectures, perform risk‑based access controls, and mentor junior staff while collaborating with cloud, security and infrastructure teams across client engagements.

Qualifications

• 5+ years of hands-on Entra ID and enterprise IAM experience.
• Strong expertise in Entra ID features like CA, MFA/passwordless, and risk-based controls.
• Understanding of RBAC, lifecycle governance, and Zero Trust architecture.

Responsibilities

• Design, implement, administer, and optimize Entra ID-centric identity solutions in cloud-first and hybrid environments.
• Lead IAM projects based on Entra ID, including JML, access reviews, and PIM.
• Provide guidance on AD/Entra ID hybrid synchronization and authentication workflows.
• Mentor junior consultants and contribute to EY standards and accelerators.

Skills

Entra ID

Zero Trust

RBAC

Hybrid identity

MFA/passwordless

Identity Protection

Tools

PowerShell

Defender for Identity

PingCastle

Purple Knight

Job description

Senior Consultant – Entra ID & Active Directory Expert

Scope of duties

• Design, implement, administer, and optimize Microsoft Entra ID–centric identity solutions in cloud-first and hybrid environments, with on‑premises Active Directory as a supporting component
• Lead and deliver modern identity and access management (IAM) solutions based on Microsoft Entra ID, aligned with Zero Trust principles
• Implement and manage modern authentication and authorization capabilities, including:
• Conditional Access
• MFA and passwordless authentication
• Identity Protection and risk-based access controls
• Design and deploy Identity Governance & Administration (IGA) capabilities within Entra ID:
• Joiner / Mover / Leaver (JML) processes
• Access packages and access reviews
• Privileged Identity Management (PIM)
• Design, implement, and support hybrid identity architectures, including synchronization and coexistence scenarios between Entra ID and on‑premises Active Directory
• Support identity transformation initiatives, such as:
• Transition from legacy AD‑centric models to cloud‑based identity
• AD rationalization, cleanup, and consolidation as part of Entra ID adoption
• Reduction of legacy authentication protocols and technical debt
• Provide guidance and hands‑on support in Active Directory where required, including:
• AD DS administration (users, groups, computers)
• Group Policy design and troubleshooting
• OU structure and delegation of administration
• DNS and replication health monitoring
• Support identity security and posture improvement activities, including:
• AD and Entra ID security hardening
• Tiering models and privileged access controls
• Health checks, risk assessments, and remediation planning
• Collaborate with cloud, security, and infrastructure teams to deliver end‑to‑end identity solutions
• Act as a technical lead and subject matter expert during client engagements, workshops, and architecture discussions
• Mentor junior consultants and contribute to internal EY standards, accelerators, and best practices
• EY.AI – In this role, your capabilities are augmented by artificial intelligence. Using EYQ and other AI‑powered tools, you will enhance analyses, insights, and solution design to deliver greater value for clients.

Our requirements

• 5+ years of hands‑on experience in Microsoft Entra ID and enterprise IAM solutions, preferably in complex or hybrid environments
• Strong expertise in Microsoft Entra ID, including: – Conditional Access design and policy modelling – MFA and passwordless authentication – Identity Protection and risk‑based controls – Role‑Based Access Control (RBAC) and least‑privilege models
• Solid understanding of identity lifecycle management, governance concepts, and Zero Trust architecture
• Proven experience with hybrid identity scenarios, including: – Microsoft Entra Connect / Cloud Sync – Synchronization and coexistence troubleshooting – Hybrid authentication flows
• Good working knowledge of Active Directory, including: – AD DS fundamentals – Group Policy – AD replication, DNS, FSMO roles, and trusts
• Understanding of modern authentication and federation protocols (OAuth 2.0, OpenID Connect, SAML)
• Experience working in consulting or professional services environments
• Strong communication skills and ability to engage effectively with both technical and non‑technical stakeholders

We will also appreciate

• Microsoft certifications (e.g. SC‑300, AZ‑500, MS‑102)
• Experience with AD forest/domain migrations, consolidations, or carve‑outs
• PowerShell scripting for Entra ID and AD automation
• Experience with identity and AD security tools (e.g. Microsoft Defender for Identity, Purple Knight, PingCastle)
• Familiarity with regulatory and security frameworks (ISO 27001, NIST, GDPR, SOX)

What we offer

• Professional and financial support in obtaining recognised qualifications and certificates;
• EY Badges - global certification of your competencies and the opportunity to earn an MBA title from the prestigious Hult University;
• Career Counselor - professional, one‑to‑one guidance on career building and development;
• Innovate EY - unique programmes where you can create your own start‑up using our know‑how and funding;
• Psycho‑educational platform - a package of free consultations with specialists in the broad field of mental health and personal development and access to educational activities;
• A convenient hybrid working model;
• Benefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, sports cards and much more (available online and offline).

About EY Poland

We are a global consulting firm - helping businesses, organisations and communities make the most of their potential. Our audit, consulting, legal, strategy, tax and transaction teams ask the non‑obvious questions to find new answers to the complex challenges facing the world today.

We employ more than 390,000 exceptional people in over 150 countries around the world. In Poland there are over 7,000 of us, working in: Warsaw, Gdansk, Katowice, Krakow, Lodz, Poznan, Rzeszow and Wroclaw.

We create amazing things together every day. We have the people, the development path and the training to help you grow fast, gaining experience on successive projects.

We care about the environment - not just the business. As part of our plan, we have reduced our global greenhouse gas emissions by 43% from a 2019 baseline.

EY is an equal opportunity employer, we value and promote diversity in the knowledge and experience of our community. We operate the 'Level Up Without Barriers' program, which supports employees with disabilities to achieve their career ambitions and dreams.

EY provides all applicants with equal opportunities in the recruitment process, regardless of gender, age, race, religion, sexual orientation, national origin, disability or any other legally protected basis, in accordance with applicable law.