Cloud Infra Windows Platform IAM Engineer

Your key responsibilities

• Environment & Platform Ownership

  • Lead day to day management of on prem and cloud environments, ensuring stable provisioning, configuration, and operational best practices.
  • Provide SME level guidance on architecture, platform optimization, and cross platform integrations.

• Identity & Windows Platform Management

  • Manage and optimize IAM and Windows platforms including Active Directory, ADFS, Azure AD, AWS IAM, Google Identity, AD DS, DNS, DHCP, GPO, PKI.
  • Implement and support SSO, MFA, Conditional Access, federation, and hybrid identity integrations for SaaS and on prem applications.

• Incident, RCA & Operational Leadership

  • Own high priority technical incidents, lead major incident bridges, and drive swift service restoration.
  • Deliver detailed RCA with corrective and preventive actions, ensuring operational excellence.

• Reliability, Monitoring & SRE Practices

  • Improve service reliability through proactive monitoring, trend analysis, observability enhancements, and SLO/SLI tracking.
  • Reduce MTTR and strengthen uptime through SRE methodologies and data driven insights.

• Automation, IaC & Cloud Integration

  • Architect and implement automation using PowerShell, Terraform, Ansible, Python/Shell.
  • Drive IaC, GitOps, config drift controls, self healing mechanisms, and automated policy enforcement across cloud and identity workloads.

• Modernization, Migration & Lifecycle Management

  • Lead modernization programs, platform upgrades, identity transformations, cloud migrations, and EOL remediation efforts.
  • Conduct dependency mapping, cutover planning, post migration validation, and maintain updated asset inventories.

• Security, Compliance & Governance

  • Enforce RBAC, least privilege, Zero Trust, and configuration standards across all platforms.
  • Ensure compliance with ISO, CIS, NIST, maintain audit readiness, and uphold ITSM processes (Incident, Problem, Change).

• Collaboration, Mentoring & Stakeholder Engagement

  • Partner with architects, application teams, cybersecurity, and cloud teams to deliver secure and scalable solutions.
  • Provide L3 technical support, mentor junior engineers, conduct code reviews, and develop high quality runbooks, SOPs, and knowledge sharing assets.
  • Present operational insights and reliability metrics to leadership to support data driven decisions.

Skills and attributes for success

Required Skills

• 4–6 years of core experience across IAM, Windows, Linux/Unix, and Cloud, including AD/ADFS, Azure AD, AWS IAM, Google Identity, Windows Server, GPO, and PKI.
• Expert level Linux/Unix administration, including deep kernel tuning, performance debugging, advanced filesystem analysis, and OS level troubleshooting.
• Strong cloud engineering expertise across Azure/AWS/GCP—covering networking, compute, storage, IAM, hybrid connectivity, and platform security.
• Advanced scripting & automation engineering using Shell, Bash, Python, PowerShell, Terraform, and Ansible, with ability to build reusable automation frameworks.
• Advanced patching & vulnerability management, including patch strategy design, automated patch cycles, remediation workflows, and compliance enforcement.
• SRE driven reliability engineering, including SLO/SLI definition, error budgets, chaos testing exposure, proactive monitoring, MTTR reduction, and systemic issue elimination.
• Strong observability & monitoring expertise using Azure Monitor, CloudWatch, Splunk, Prometheus, Grafana, ELK, Dynatrace—able to build dashboards, alerting standards, and log pipelines.
• Security & compliance grounding, including Zero Trust, RBAC, least privilege, MFA/SSO, federation, NIST/ISO/CIS benchmarks, and audit readiness.
• Hands on migration & modernization experience, including provisioning workflow optimization, Windows/IAM/cloud migrations, EOL remediation, lifecycle upgrades, and environment cutovers.

Preferred Qualifications

• Certifications: Microsoft Certified: Identity & Access Administrator / Enterprise Administrator Expert.
• Familiarity with Okta, Ping Identity, CyberArk, or other IAM platforms.
• Experience in hybrid identity governance and compliance programs.

Education:

• Degree: Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent practical experience

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations – Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.