IAM Services - Credential Protection - EY Global Delivery Services

Job Summary:

The Cyber Security Engineer will be responsible for the operation, maintenance, and security of an Active Directory forest supporting multiple enterprise forests. The engineer will be responsible for protecting the highly privileged accounts and their associated credentials. The engineer will also work with team members to enhance security monitoring tools with contextual information. The engineer must be able to review vulnerability scans and provide an assessment of the vulnerabilities as they relate to the environment. The engineer will review various sources for security information and threats and determine the potential impact to the environment.  Risk assessment techniques are a plus.

Essential Functions of the Job:

• Ability to manage and maintain an Active Directory forest infrastructure
• Ability to troubleshoot common Windows and Active Directory issues
• Ability to locate and assimilate new information to provide context for security events
• Excellent English language skills, both written and verbal
• Excellent technical writing skills
• Excellent interpersonal, communication, consultative and project management skills
• Strong judgment and analytical ability
• Ability to implement and support privileged accounts throughout the enterprise

Analytical/Decision Making Responsibilities:

• Ability to recognize and research attacks and attack patterns
• Ability to prioritize events so that the most impactful are addressed first
• Ability to work effectively with clients, management staff members, venders and consultants
• Project planning and project leadership skills
• Ability to interface with cross-functional technology teams
• Ability to deliver projects on time and on budget
• Perform advanced analysis, troubleshooting, problem isolation of customers and partners issues and requests

Knowledge and Skills Requirements:

• Strong knowledge of information security technologies
• Server 2019 / 2022 (Core and Standard versions), Windows 11 maintenance & troubleshooting
• Active Directory Maintenance & Troubleshooting (object backup/restore, disaster recovery)
• Active Directory Multi Forest Management within Trusts
• Group Policy Management, Troubleshooting, Design
• DNS, DFS, WSUS, CA, SCOM, Hyper-V
• TCP/IP network expertise
• Experience with host based intrusion detection/prevention (IDS/IPS)
• Knowledge of Cloud Computing & Security (Azure)
• Knowledge of PowerShell scripting
• Knowledge of IPsec desired
• Knowledge of PKI desired
• knowledge of Microsoft’s Active Directory administrative tiers and the ESAE Administrative Forest Design model is a plus
• Experience with 24x7 support is a plus
• Strong research skills
• Excellent team skills and integrity in a professional environment
• Excellent social, communication and technical writing skills Demonstrated integrity in a professional environment
• Knowledgeable in legal issues within information security environments (i.e., data privacy)
• Excellent teaming skills
• Exceptional social, communication, and technical and general writing skills

Supervision Responsibilities:

• Must be self-motivated and able to work independently, often unsupervised
• Supervisory responsibility over a team of 4 to 8  L3 specialists, engineers, and technical leads of varying skills and experience
• Responsible for providing guidance to colleagues/counselees where required through established coaching and feedback processes
• Responsible for co-developing annual plans with counselees
• Participation in firm’s performance management and development process
• Involved in interviewing and hiring decisions for prospective staff

Job Requirements:

Education:

Bachelors or Masters Degree in Computer Science, Computer Information Systems, Engineering or related field.

ALLOWABLE SUBSTITUTION: The equivalent combination of education, technical certifications or training, or work experience.

Experience:

• 10+ years Active Directory configuration, administration, and troubleshooting
• 10+ years Windows Server platform administration
• 2+ years ESAE administration (nice to have)
• Scripting and writing PowerShell Cmdlets
• Reviewing security events and threats
• Understanding of Public Key Infrastructure (PKI) and certificate-based IPsec 
• IT service management via ServiceNow

Certification Requirements:

Microsoft, ComTIA, ITIL, GIAC etc. ( desirable)