DE-Cloud Infra-IAM Architect-BFA-GDSF02

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Career Family-Cloud Infra _Windows Platform IAM Architect

The opportunity

We are the only professional services organization who has a separate business dedicated exclusively to the financial services marketplace. Join Digital Engineering Team and you will work with multi-disciplinary teams from around the world to deliver a global perspective. Aligned to key industry groups including Asset management, Banking and Capital Markets, Insurance and Private Equity, Health, Government, Power and Utilities, we provide integrated advisory, assurance, tax, and transaction services. Through diverse experiences, world-class learning and individually tailored coaching you will experience ongoing professional development. That’s how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders, and in so doing, play a critical role in building a better working world for our people, for our clients and for our communities. Sound interesting? Well, this is just the beginning. Because whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

We are seeking an experienced Cloud Architect / Infrastructure Manager with 8–10 years of expertise in Identity and Access Management (IAM), Windows platforms, and multi cloud technologies across Azure, AWS, and GCP. In this role, you will architect and modernize enterprise identity strategies, lead large scale Windows and infrastructure transformations, and drive hybrid cloud integration across global environments. As the Infra Support Manager, you will lead a high performing team of Infra and SRE engineers to deliver stable, secure, resilient, and automated cloud and on prem platforms. You will be accountable for operational excellence, engineering maturity, proactive risk management, and continuous improvement initiatives. This role requires close collaboration with CXOs, architects, and global stakeholders to ensure secure, compliant, and scalable identity and infrastructure services that accelerate enterprise cloud adoption while empowering your team through coaching, mentoring, and performance excellence.

EY Digital Engineering is a unique, industry-focused business unit that provides a broad range of integrated services that leverage deep industry experience with strong functional capability and product knowledge. The Digital Engineering practice works with clients to analyse, formulate, design, mobilize and drive digital transformation initiatives. We advise clients on their most pressing digital challenges and opportunities surround business strategy, customer, growth, profit optimization, innovation, technology strategy, and digital transformation.  We also have a unique ability to help our clients translate strategy into actionable technical design, and transformation planning/mobilization.  Through our unique combination of competencies and solutions, EY’s DE team helps our clients sustain competitive advantage and profitability by developing strategies to stay ahead of the rapid pace of change and disruption and supporting the execution of complex transformations

Your key responsibilities

Architecture, Strategy & Platform Modernization

• Define and drive enterprise infrastructure and identity strategy across multi‑cloud environments (Azure, AWS, GCP).
• Architect and modernize Windows Server, AD/Azure AD, hybrid identity, and federation services.
• Establish Zero Trust principles, conditional access models, privileged identity controls, and hybrid integration patterns.
• Partner with architecture teams to influence platform decisions, capacity planning, scaling, and modernization roadmaps..

Operational Ownership & Service Reliability

• Own end to end service uptime, performance, availability, and reliability metrics across cloud and on premise platforms.
• Define, monitor, and report SLOs/SLIs, operational KPIs, observability maturity, and incident metrics.
• Lead major incident management, coordinate cross functional resolution, and ensure high quality RCA outcomes.
• Build proactive maintenance strategies, reliability roadmaps, and operational maturity frameworks.

Platform Engineering & Automation

• Lead lifecycle management of AD, Azure AD, PKI, Group Policies, Windows workloads, and identity platforms.
• Drive automation-first engineering using Terraform, Ansible, PowerShell, and Infra‑as‑Code.
• Sponsor initiatives that eliminate toil, improve speed, enhance stability, and increase environment consistency.
• Lead adoption of DevOps/SRE practices, GitOps models, and best‑in‑class observability solutions.

Security, Governance & Compliance

• Implement IAM governance, RBAC, least privilege, MFA/SSO, and continuous access evaluation.
• Ensure compliance with security standards (NIST, ISO, CIS) and partner with security teams for DevSecOps alignment.
• Oversee adherence to ITSM processes (Incident, Problem, Change), audit readiness, and risk controls.
• Standardize documentation including runbooks, SOPs, operational guidelines, and compliance processes.

Migration, Transformation & Cloud Adoption

• Lead identity migrations, AD consolidation, and transitions from legacy Windows environments to modern hybrid identity solutions.
• Drive enterprise cloud adoption initiatives integrating identity, security, and infrastructure with Azure, AWS, and GCP workloads.
• Enable adoption of modern authentication (MFA, conditional access, passwordless) across the enterprise.

Leadership & Collaboration

• Develop Infra/SRE engineers and guide global senior engineers and architects in applying best practice architecture standards.
• Lead, mentor, and upskill Infra/SRE engineers while guiding senior engineers and architects globally on best practice architecture standards.
• Promote a culture of accountability, collaboration, operational excellence, and continuous learning.
• Collaborate with CXOs, application owners, cloud teams, cybersecurity, and cross functional stakeholders.
• Act as a key point of contact for service health, escalations, operational reviews, audits, and client interactions.
• Represent the organization in customer, partner, and industry forums as a technical leader.

Skills and attributes for success

Required Skills

• 8–10 years of IT experience with deep expertise in IAM, Windows platforms, Linux/Unix, cloud infrastructure (Azure/AWS/GCP), and hybrid environment operations.
• 3–5 years of leadership experience managing Infra/SRE teams, driving 24x7 operations, and leading cross‑functional technical discussions.
• Strong hands‑on capability in automation & IaC (Python/Shell/Bash, PowerShell, Terraform, Ansible, GitOps, CI/CD tools) and proven ability to reduce toil and improve operational efficiency.
• Demonstrated expertise in SRE practices including SLO/SLI definition, observability, incident management, RCA quality, and improving MTTR/monitoring maturity.
• Deep knowledge of identity, authentication & security frameworks—Azure AD/AD, MFA, SSO, federation, Zero Trust, RBAC, compliance, patching, and vulnerability management.
• Strong experience in cloud & on‑prem modernization, including migrations, upgrades, lifecycle management, DR planning (RPO/RTO), and multi‑region cloud operations.
• Proficient with monitoring and observability ecosystems (Prometheus, Grafana, Splunk, Dynatrace, ELK, CloudWatch/App Insights) and defining alerting & service health standards.
• Excellent communication, documentation, stakeholder management, and decision‑making skills, with proven ability to lead global teams and collaborate across time zones..

Preferred Qualifications

• Certifications: Microsoft Certified: Identity & Access Administrator / Enterprise Administrator Expert, TOGAF.
• Experience with PAM solutions (CyberArk, BeyondTrust), and advanced identity governance (SailPoint, Okta, Ping).
• Pre-sales or consulting background for enterprise identity transformation.

Education:

• Degree: Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent practical experience

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations – Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world 

 
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  

 
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  

 
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.