This job posting isn't available in all website languages

Senior Active Directory Engineer

Core Business Services
ALP001WA Requisition #
Share this Job

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 250,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day.  Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients.  Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.


EY Technology supports our technology needs through three business units:


Client Technology (CT) - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster, and pursue those opportunities more rapidly.


Enterprise Workplace Technology (EWT) – EWT supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. EWT will also support our internal technology needs by focusing on a better user experience.


Information Security (Info Sec) - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems.  

The opportunity

As part of dynamic and highly knowledgeable teams, the Directory Enablement Engineer drives the best practices in basic to complex engineering activities aligned to directory services technologies and supports the remediation and implementation directives for the technology as may be identified by or assigned to the Identity & Access Management Services (IAMS) group within Information Security.  The role designs and develops said architectural elements or modifications including but not limited to integrated processes, applications, data and technology remediation. The role supports the need for engineered solutions from Information Technology (IT) enterprise architecture directives, as determined by operational requirements from such global operations partners as Identity & Access Management Services (IAMS) within Information Security. The role’s efforts maintain directory technologies (e.g. Active Directory, Azure AD, and Ping Directory) and other security aligned functions and performs all work in adherence to EY’s compliance standards for technology development and deployment.  As part of supporting a continuous process improvement remit, the role is expected to utilize a variety of modern IT systems management technologies for large, complex environments including Configuration Manager, Operations Manager, PowerBroker, ActiveRoles Server, Splunk reporting and scripting technologies such as PowerShell.

The role’s activities are to remediate or prevent configuration “drift” or the misalignment of a current technical setup of hardware and software to an alignment of technology that does not support the intended IT process or service.  The role’s remit additionally advances the specifics of the assigned IT landscape and technologies further up the maturity curve as part of the IAM service’s lifecycle and as such supports technical planning for new or modified versions of all directory technologies in use by IAMS, reviews new technical specifications and identifies changes or modifications, all of which maintain operational readiness in directory services.  The role captures changes and develops engineered solutions according to agreed specifications such as Operating Level Agreements (OLA) or Service Level Agreements (SLA) and partners with appropriate Domain peers on core components of the IT infrastructure to be aligned or augmented to accept same prior to implementation. The role provides and drives the integration of these amended services by engaging in appropriate planning of all phases of deployment as well as testing for compatibility in order to achieve an integrated architecture across interdependent technologies. The role Is recognized as a thought leader in general server aligned services within IAM as well as a specialized depth as well as breadth of engineering knowledge for directory technologies.  The role is an individual contributor, though may be asked to manage project aligned teams in their collaborative efforts and to coach less seasoned members of the team in complex directives.  The role is guided by the Team Lead for Directory Enablement in IAMS.


Your key responsibilities

The role may also require the periodic allocation of additional time on the job to support multiple demands and escalating issues and could be asked to travel to support planned project activities and collaboration.

The role is generally an individual contributor but can and will operate as a lead on particular projects and therefore manage specific Active Directory engineering activities.  The role may be asked to mentor and guide across time zones and cultures and maintain effective and efficient oversight of all aligned activities. The role itself is generally guided by the Team Lead for Directory Enablement as a core component within IAMS and Information Security..


Skills and attributes for success

  • Ability to write detailed documentation required for solution delivery for instructional content for implementing engineers, as well as operational content and diagrams for support engineers.

  • Maintains solid interpersonal skills to engage with others including senior executives of the firm, in cross business discussions within a matrixed, geographically dispersed organization and to build a solid network of peers and others of influence. Adapts personal communication style to the style of others, develops rapport, stay calm under pressure and escalating issues using advanced oral and written English communication skills. 

  • Projects well-defined consultative skill to conduct effective questioning, hone in on key directives to formulate ideas and materials as well as present those ideas clearly and concisely to all levels of the organization including senior and/or executive management.

  • Maintains an advanced comprehensive knowledge of services and applications with the future and forward vision of the IAM processes and operating environment to recognize and position improvement opportunities and next generation solutions achievable through engineering or other technical solutions.

  • Manifests a strong analytical and problem-solving ability to escalate and negotiate complex and conflicting IAM or Information Security aligned engineering issues, handle multiple and shifting IAM engineering priorities across a broad spectrum of operating environments and drive solutions that are both financially sound and operationally feasible.

  • Develops an in depth and continuous understanding of EY’s business and the way IAMS Engineering teams adds to the effectiveness of the EY business.  Positions appropriate services and solutions as part of both knowledge sharing and Directory Enablement services positioning.

  • Manage engineering projects by operating within best practices or delegate work as needed utilizing the proper resource, time and project management disciplines across a diverse culture and multiple time zones. 

  • Maintains a continuous review of aligned applications and software, servers and networks aligned to the IAM and directory environments including but not limited to the Systems Center Operations Manager Administration, Windows 2008, 2012, and 2016 Administration and Infrastructure, perimeter networks (DMZ), Single Sign-On (SSO) configuration and remediation, and Lightweight Directory Access Protocol (LDAP).

  • Maintains advanced and continuous knowledge of the ancillary technologies to be engineered such as Lightweight Directory Services (LDS), Rights Management Systems (RMS) as part of the IAM services to support the time sensitive management, monitoring and automation of Tier 0 technologies and other directives and drive continuous improvement.


To qualify for the role you must have

  • College degree in related technology field (Computer, Engineering, Science, etc.) or comparable job experiences aligned to Active Directory and/or IAM engineering directives 

  • Approximately 8 to 10 years of experience in an engineering role. Able to exhibit a progression of increasingly complex job responsibilities during the period inclusive of project management skills, engineering remediation techniques and project planning and implementation.

  • Certification as a Microsoft Certified Systems Administrator (MCSA)

  • Certification as a Microsoft Certified Solution Expert (MCSE) Core Infrastructure or Productivity

  • 10 years Active Directory

  • 2 years Azure AD

  • 4 years PowerShell scripting

Ideally, you’ll also have
  • Understanding and experience with Azure managed services.

  • Understanding and experience with Cloud service providers, such as AWS.

  • Understanding and experience with Ping Directory.

  • Understanding and experience with System Center Configuration Manager.

  • PowerBroker
  • ActiveRoles Server

  • Splunk
What we look for

Our Ideal candidate is an accomplished self-starter who shares our passion for technology.

What working at EY offers

We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

  • Support, coaching and feedback from some of the most engaging colleagues around

  • Opportunities to develop new skills and progress your career

  • The freedom and flexibility to handle your role in a way that’s right for you


EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

About EY

As a global leader in assurance, tax, transaction and advisory services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.


If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.

Join us in building a better working world.   


Apply now.


EY, an equal employment opportunity employer (Females/Minorities/Protected Veterans/Disabled), values the diversity of our workforce and the knowledge of our people.



My Profile

Create and manage profiles for future opportunities.

Go to Profile

My Submissions

Track your opportunities.

My Submissions

Similar Listings

Alpharetta, Georgia, United States

📁 Core Business Services

Requisition #: ALP001YL

Alpharetta, Georgia, United States

📁 Core Business Services

Requisition #: ALP001XM

Alpharetta, Georgia, United States

📁 Core Business Services

Requisition #: ALP001UO