Security Engineer - EY Global Delivery Services

STS Lab Operations Engineer (Rank 64)

The Opportunity

The EY Security Technology Services (STS) Lab is the innovation and engineering engine behind EY's global cybersecurity platform. As a Lab Operations & Access Engineer at the Supervising Associate level within the STS Lab team in GDS Argentina, you will be the hands-on operational backbone of the lab's day-to-day functioning. You will own lab account provisioning, RBAC governance, shared asset management, and request fulfillment — ensuring that engineers, architects, and SMEs across IAM, Defender XDR, Sentinel, and Purview can work in well-governed, properly segmented lab environments. You will work closely with the STS Lab Lead, Cloud Platform Security Architects, and the Configuration & Automation Engineering team to maintain the operational health and access integrity of the lab's Microsoft Fabric and Azure-based building blocks.

Your Key Responsibilities

• Lab Account Management — Provision, maintain, and decommission lab user accounts across Azure AD / Entra ID, Microsoft 365, and Fabric tenants following defined lifecycle processes.

• RBAC & Access Governance — Design, implement, and audit Role-Based Access Control across Azure subscriptions, Fabric workspaces, Microsoft Defender, and Microsoft Sentinel environments; enforce least-privilege principles.

• Shared Asset Management — Track and govern shared lab resources including virtual machines, shared credentials vaults, and network segments to prevent configuration drift.

• Serve as the first point of contact for day-to-day lab support requests; triage access issues, environment faults, and provisioning requests with defined SLAs.

• Azure Portal Deployments — Execute controlled deployments through the Azure Portal and ARM/Bicep templates for new lab resources; coordinate change approvals and maintain deployment logs.

• GitHub Workflows — Manage lab access request pipelines and change tracking via GitHub Issues and pull requests; contribute to automation scripts and GitHub Actions workflows that streamline provisioning.

• Microsoft Defender Integration — Support onboarding of lab endpoints and identities to Microsoft Defender for Endpoint and Defender for Identity; validate policy assignments and alert suppression rules for lab environments.

• Documentation & Runbooks — Produce and maintain clear operational runbooks, access matrices, and asset registers that other team members can execute independently.

• Cross-functional Collaboration — Coordinate with IAM, Defender/Sentinel, Purview, and Endpoint Security SMEs to ensure access models align with engineering needs.

Skills and Attributes for Success

We are interested in people who bring operational discipline and a security-first mindset from supporting large enterprises or lab environments. As a successful candidate you will have functional, technical, and hands-on delivery experience with Azure access management, Microsoft security tooling, and structured request handling.

• Azure Portal proficiency — comfortable navigating, deploying, and governing resources across multiple Azure subscriptions and Entra ID tenants.

• RBAC expertise — proven ability to design and implement role assignments at Tenant, Management Group, Subscription, Resource Group, and Resource level.

• GitHub fluency — experience using GitHub for issue tracking, pull requests, and basic GitHub Actions for automation; familiarity with GitHub Copilot is a plus.

• Microsoft Defender awareness — working knowledge of Defender for Endpoint, Defender for Identity, or Defender for Cloud, particularly around onboarding and policy configuration.

• Operational mindset — structured, detail-oriented, and able to manage multiple concurrent requests without losing track of asset state or access entitlements.

• Communication — fluent English, written and verbal; able to translate technical access requirements into clear, auditable records.

• Collaboration — comfortable working across globally distributed, culturally diverse teams and able to coordinate without formal authority.

To Qualify for the Role, You Must Have

• 3–5 years of experience in IT Operations, Cloud Operations, or Security Engineering with demonstrable hands-on work in access management or lab/environment support.

• Technical proficiency with Microsoft Azure: Azure Portal, Entra ID (Azure AD), RBAC, Subscriptions, and Resource Management.

• Hands-on experience with GitHub for operational workflows — issue tracking, branching, and pull request management.

• Working knowledge of Microsoft Defender products (Defender for Endpoint, Defender for Identity, or Defender for Cloud).

• Experience managing shared infrastructure assets and maintaining accurate asset inventories.

• Strong troubleshooting and triage skills; ability to resolve access and environment issues methodically.

• Ability to document processes and produce runbooks for global distribution.

Ideally, You Will Also Have

• Bachelor’s degree in computer science, Engineering, IT, or a related field — or equivalent work experience.

• Microsoft certification: AZ-104 (Azure Administrator), SC-300 (Identity and Access Administrator), or SC-200 (Security Operations Analyst).

• Familiarity with Microsoft Fabric capacities, workspace, and domain management.

• Experience with PowerShell or Python scripting for automated provisioning and access review tasks.

• Exposure to Microsoft Sentinel, Purview, or Entra Privileged Identity Management (PIM).

• Background in ITSM tooling (ServiceNow or similar) for structured request and change management.

• Security certification: GSEC, CompTIA Security+, or equivalent.

What We Look For

This role is perfect for you if you combine operational reliability with a genuine curiosity for security tooling. We are looking for people who:

• Bring governance rigor — access matrices are kept current, assets are tagged, and every change is logged.

• Own the queue: when a request comes in, it gets resolved — and the fix gets documented.

• Are comfortable operating as a trusted gatekeeper in a fast-moving lab environment where new tools are constantly being evaluated.

• Operate with a startup mindset inside a large global organization — proactive, adaptable, and solutions-oriented.

What We Offer

• Continuous learning: Access to EY's global learning platforms, technical training, and certification sponsorship.

• Success as defined by you: Tools and flexibility to make a significant impact — deepen your technical specialization or grow into cloud engineering or architecture roles.

• Transformative leadership: Coaching and confidence-building to help you grow as a technical leader globally.

• Diverse and inclusive culture: You will be accepted for who you are; flexible working arrangements supported.

• Competitive compensation aligned to the Argentine senior technology market, including performance-based incentives.