Active Directory Senior Engineer

Technology has always been at the heart of what we do at EY. With 250,000 people in more than 140 countries, we rely on secure and efficient technology every day—from laptops and mobile access to collaboration tools, internal platforms and client‑facing solutions. Technology is embedded in our services and drives our ability to innovate.

EY Technology supports these needs through three business units:

Client Technology (CT) – Develops technology‑enabled services for clients and accelerates how EY identifies and delivers new digital opportunities.
Enterprise Workplace Technology (EWT) – Provides cost‑effective internal technology and supports our Core Business Services with a focus on user experience.
Information Security (Info Sec) – Protects EY and client data through prevention, detection, response and mitigation of cyber risks.

The Opportunity

The Directory Enablement Engineer delivers engineering solutions for directory services and supports Identity & Access Management Services (IAMS). The role focuses on enhancing and maintaining Active Directory, Entra ID and related technologies, ensuring they meet EY’s security and compliance requirements. It uses modern systems management and automation tools, including Configuration Manager, Operations Manager, Active Roles Server, PowerShell and Sentinel.

The engineer prevents configuration drift, supports technology roadmaps, evaluates new specifications and ensures operational readiness. The role collaborates with infrastructure teams to plan, test and implement changes, ensuring seamless integration across dependent technologies. As a recognized technical specialist, the engineer contributes individually, may lead project-based work and supports less experienced team members under the guidance of the Directory Enablement Team Lead.

Your Key Responsibilities

The role requires expertise in hybrid identity environments using Microsoft Active Directory Domain Services and Microsoft Entra ID.

It may involve extended hours during peak demand and occasional travel for project activities. While typically an individual contributor, the role may lead Active Directory engineering deliverables, mentor team members across regions and coordinate technical activities. The role operates under the direction of the Team Lead for Directory Enablement within IAMS and Information Security.

Skills and Attributes for Success

• Strong written and verbal communication skills, including clear engineering and operational documentation.
• Advanced interpersonal and consultative abilities suited for a global, matrixed organization and senior-level engagement.
• Deep technical understanding of IAM services, directory technologies and related infrastructure, with a forward-looking approach to improvements.
• Strong analytical and problem‑solving skills to address complex engineering challenges and deliver practical, cost‑effective solutions.
• Proven ability to coordinate engineering efforts across geographies using solid project management practices.

To Qualify for the Role, You Must Have

• College degree in a related technology field or equivalent experience aligned to Active Directory and/or IAM engineering
• 8–10 years of progressive engineering experience, including project management and remediation work
• Microsoft Certified Systems Administrator (MCSA)
• Microsoft Certified Solutions Expert (MCSE) Core Infrastructure or Productivity
• 10 years of Active Directory experience
• 2 years of Azure AD experience
• 4 years of PowerShell scripting experience

Ideally, You’ll Also Have

• Experience with Azure managed services
• Experience with cloud providers such as AWS
• Experience with System Center Configuration Manager
• Powerbroker
• Active Roles Server
• Splunk and/or Sentinel

What We Look For

A proactive, experienced technologist who thrives in a dynamic environment and shares our passion for innovation.