{"id":2214547,"url":"https://alion.io/job/ernst-young-security-engineer-ey-global-delivery-services-2","title":"Security Engineer - EY Global Delivery Services","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Buenos Aires, Argentina"],"countries":["AR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":88000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"Copilot","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Fabric","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"ITSM","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-10T02:01:00Z","employer_posted_date":"2026-10-10","last_verified_at":"2026-10-23T18:04:39Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"STS Lab Operations Engineer (Rank 64)\nThe Opportunity\nThe EY Security Technology Services (STS) Lab is the innovation and engineering engine behind EY's global cybersecurity platform. As a Lab Operations & Access Engineer at the Supervising Associate level within the STS Lab team in GDS Argentina, you will be the hands-on operational backbone of the lab's day-to-day functioning. You will own lab account provisioning, RBAC governance, shared asset management, and request fulfillment - ensuring that engineers, architects, and SMEs across IAM, Defender XDR, Sentinel, and Purview can work in well-governed, properly segmented lab environments. You will work closely with the STS Lab Lead, Cloud Platform Security Architects, and the Configuration & Automation Engineering team to maintain the operational health and access integrity of the lab's Microsoft Fabric and Azure-based building blocks.\nYour Key Responsibilities\nLab Account Management - Provision, maintain, and decommission lab user accounts across Azure AD / Entra ID, Microsoft 365, and Fabric tenants following defined lifecycle processes.\nRBAC & Access Governance - Design, implement, and audit Role-Based Access Control across Azure subscriptions, Fabric workspaces, Microsoft Defender, and Microsoft Sentinel environments; enforce least-privilege principles.\nShared Asset Management - Track and govern shared lab resources including virtual machines, shared credentials vaults, and network segments to prevent configuration drift.\nServe as the first point of contact for day-to-day lab support requests; triage access issues, environment faults, and provisioning requests with defined SLAs.\nAzure Portal Deployments - Execute controlled deployments through the Azure Portal and ARM/Bicep templates for new lab resources; coordinate change approvals and maintain deployment logs.\nGitHub Workflows - Manage lab access request pipelines and change tracking via GitHub Issues and pull requests; contribute to automation scripts and GitHub Actions workflows that streamline provisioning.\nMicrosoft Defender Integration - Support onboarding of lab endpoints and identities to Microsoft Defender for Endpoint and Defender for Identity; validate policy assignments and alert suppression rules for lab environments.\nDocumentation & Runbooks - Produce and maintain clear operational runbooks, access matrices, and asset registers that other team members can execute independently.\nCross-functional Collaboration - Coordinate with IAM, Defender/Sentinel, Purview, and Endpoint Security SMEs to ensure access models align with engineering needs.\nSkills and Attributes for Success\nWe are interested in people who bring operational discipline and a security-first mindset from supporting large enterprises or lab environments. As a successful candidate you will have functional, technical, and hands-on delivery experience with Azure access management, Microsoft security tooling, and structured request handling.\nAzure Portal proficiency - comfortable navigating, deploying, and governing resources across multiple Azure subscriptions and Entra ID tenants.\nRBAC expertise - proven ability to design and implement role assignments at Tenant, Management Group, Subscription, Resource Group, and Resource level.\nGitHub fluency - experience using GitHub for issue tracking, pull requests, and basic GitHub Actions for automation; familiarity with GitHub Copilot is a plus.\nMicrosoft Defender awareness - working knowledge of Defender for Endpoint, Defender for Identity, or Defender for Cloud, particularly around onboarding and policy configuration.\nOperational mindset - structured, detail-oriented, and able to manage multiple concurrent requests without losing track of asset state or access entitlements.\nCommunication - fluent English, written and verbal; able to translate technical access requirements into clear, auditable records.\nCollaboration - comfortable working across globally distributed, culturally diverse teams and able to coordinate without formal authority.\nTo Qualify for the Role, You Must Have\n3-5 years of experience in IT Operations, Cloud Operations, or Security Engineering with demonstrable hands-on work in access management or lab/environment support.\nTechnical proficiency with Microsoft Azure: Azure Portal, Entra ID (Azure AD), RBAC, Subscriptions, and Resource Management.\nHands-on experience with GitHub for operational workflows - issue tracking, branching, and pull request management.\nWorking knowledge of Microsoft Defender products (Defender for Endpoint, Defender for Identity, or Defender for Cloud).\nExperience managing shared infrastructure assets and maintaining accurate asset inventories.\nStrong troubleshooting and triage skills; ability to resolve access and environment issues methodically.\nAbility to document processes and produce runbooks for global distribution.\nIdeally, You Will Also Have\nBachelor’s degree in computer science, Engineering, IT, or a related field - or equivalent work experience.\nMicrosoft certification: AZ-104 (Azure Administrator), SC-300 (Identity and Access Administrator), or SC-200 (Security Operations Analyst).\nFamiliarity with Microsoft Fabric capacities, workspace, and domain management.\nExperience with PowerShell or Python scripting for automated provisioning and access review tasks.\nExposure to Microsoft Sentinel, Purview, or Entra Privileged Identity Management (PIM).\nBackground in ITSM tooling (ServiceNow or similar) for structured request and change management.\nSecurity certification: GSEC, CompTIA Security+, or equivalent.\nWhat We Look For\nThis role is perfect for you if you combine operational reliability with a genuine curiosity for security tooling. We are looking for people who:\nBring governance rigor - access matrices are kept current, assets are tagged, and every change is logged.\nOwn the queue: when a request comes in, it gets resolved - and the fix gets documented.\nAre comfortable operating as a trusted gatekeeper in a fast-moving lab environment where new tools are constantly being evaluated.\nOperate with a startup mindset inside a large global organization - proactive, adaptable, and solutions-oriented.\nWhat We Offer\nContinuous learning: Access to EY's global learning platforms, technical training, and certification sponsorship.\nSuccess as defined by you: Tools and flexibility to make a significant impact - deepen your technical specialization or grow into cloud engineering or architecture roles.\nTransformative leadership: Coaching and confidence-building to help you grow as a technical leader globally.\nDiverse and inclusive culture: You will be accepted for who you are; flexible working arrangements supported.\nCompetitive compensation aligned to the Argentine senior technology market, including performance-based incentives.","description_format":"text","description_chars":6811,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Delivery","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-10T06:35:32Z"}],"visa":[],"liveness":{"score":78,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.864,"p_room":0.9,"age_days":13,"expected_fill_days":21,"reasons":["conf:4","velocity","win:mid","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-security-engineer-ey-global-delivery-services-2","json_url":"https://alion.io/job/ernst-young-security-engineer-ey-global-delivery-services-2.json","meta":{"generated_at":"2026-10-23T21:28:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3585,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-security-engineer-ey-global-delivery-services-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-security-engineer-ey-global-delivery-services-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-security-engineer-ey-global-delivery-services-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-security-engineer-ey-global-delivery-services-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-security-engineer-ey-global-delivery-services-2"}]}