{"id":4163253,"url":"https://alion.io/job/ey-iam-directory-implementation-engineer-supervising-associate","title":"IAM Directory Implementation Engineer - Supervising Associate","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Katowice, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Visual Basic","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Hyper-V","optional":true},{"name":"ITIL","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-11-12T12:49:07Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T12:49:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"IAM Directory Implementation Engineer - Supervising Associate\nLocation: Wrocław / Katowice - 2 days in office / 3 days remote\nLet us introduce you the job offer by EY GDS Poland - a member of the global integrated service delivery center network by EY.\nThe Active Directory & Entra ID Engineer has responsibilities to implement, configure and maintain the IAMS instance of Active Directory and Cloud Infrastructre. This individual will assist to manage end-to-end aspects of the services including but not limited to production infrastructure deployment, troubleshooting, standards, vendor management, and day-to-day configuration. Other responsibilities include drivings stability, disaster recovery, monitoring along with the resolution of incidents and problems, maintenance support, application platform change control, and automation of processes and procedures. This individual will work closely with other teams within EY to drive technology standards and consistency across IT Services.\nEY Technology:\nTechnology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 250,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.\nThe opportunity\nAs part of the Identity and Access Management organization, this individual will support and manage all end-to-end aspects of the Active Directory and Cloud services. The individual will implement, automate and support secure directory services across Active Directory, Microsoft Entra ID and hybrid identity environments.\nThis will include building infrastructure, deploying servers and configuration changes to the environment. The Engineer provides support, implementation, and design services for Microsoft Active Directory and Azure Active Directory across the enterprise, including directory and identity management solutions. Resolves and appropriately completes assigned cases and change requests and acts as an escalation for support issues. Other responsibilities include driving stability and security and remediation of potential security vulnerabilities. This individual will work closely with other teams within EY to drive technology standards and consistency across IT Services.\nThe role combines traditional directory engineering skills with delivery of security-hardening and modernization initiatives, including Tier 0 controls, delegated access, service account and non-human identity management, group managed service accounts, domain controller and operating system upgrades, Entra role governance, recovery capabilities and directory automation.\nThe engineer will work with Engineering, Architecture, Operations, Infrastructure, Cloud, Security and application teams to deliver resilient, least-privileged and supportable directory capabilities.\nYour key responsibilities\nAbility to plan, implement production deployment activities and scope work efforts in alignment to project\nExcellent communication skills and confidence to identify, negotiate and mitigate difficult circumstances (e.g., Handling mission critical production deployments, taking ownership of escalated production outage incidents from other infrastructure teams).\nExecute systematic security assessments of Active Directory and Azure using tools like Microsoft OnDemand Assessment to identify security risks.\nEnsure the successful technical delivery of Information Security projects and services by working directly with Project Manager, Architecture, Security Consultants, and various other teams.\nReview detailed implementation plans in regards to infrastructure change,\nAbility to communicate solutions, ideas, suggestions to a variety of (business) stakeholders effectively and comprehensively.\nAbility to carry out resolutions as they relate to service disruptions and problems\nAbility to work well within a multi-disciplinary team structure, but also independently\nAbility to work with vendors (Microsoft, Dell, Hp etc.) for escalation of service issues\nManage customer satisfaction through effectively communicating\nDemonstrates analytical and systematic approach to problem solving.\nAbility to rapidly absorb new technical information, business acumen and apply it effectively.\nKnowledge of the broader field of information systems, its use in relevant employment areas and how it relates to business activities\nImplement and validate directory security baselines, least-privilege controls and delegated administration models.\nSupport Tier 0 security, administrative tiering, privileged access workstations and secure management paths.\nImplement or enhance controls such as LAPS, protected accounts, authentication policies, cipher hardening and privileged role reduction.\nExperience with Windows Server 2022 upgrades, security baselines, LAPS, WDAC or Microsoft Defender for Endpoint.\nSupport security assessments, attack-path remediation, vulnerability remediation and audit evidence collection.\nWork with security tools such as Microsoft Defender for Identity, Silverfort or comparable identity threat protection platforms.\nMaintain lifecycle controls for service accounts, gMSAs, application identities and other non-human identities.\nSupport ownership, attestation, necessity validation, naming, description and standards compliance for directory objects.\nAdminister and engineer Active Directory forests, domains, organizational units, sites, trusts, replication, DNS and Group Policy.\nMaintain Active Directory forest recovery and cyber recovery capabilities, ensuring alignment with business continuity and security requirements.\nConfigure and support Microsoft Entra ID and hybrid identity components, including Microsoft Entra Connect.\nMaintain automation solutions using PowerShell to reduce manual administration, improve consistency and support directory modernization initiatives.\nTroubleshoot authentication, replication, synchronization, directory object and policy issues.\nImplement secure standards for users, groups, computers, service accounts and privileged identities.\nSupport directory integrations using LDAP, Kerberos, NTLM, DNS and related protocols.\nSkills and attributes for success\nExcellent collaboration, interpersonal and communication skills\nFluent in English language - written and verbal\nKnowledge and understanding of Information Security, Identity & Access Management (IAM), Active Directory Domain Services and Microsoft Entra ID\nExperience in deploying or migrating IAM solutions, including Active Directory, Azure Active Directory etc. within production environments.\nHands-on experience with Group Policy, DNS, LDAP, Kerberos, trusts, replication and privileged group management.\nShould be familiar with AD Migration / Upgrade methods, AD Performance, Scalability, availability, and DR concepts.\nUnderstanding of Tier 0, least privilege, privileged access, service accounts, gMSAs and non-human identity security.\nExperience using PowerShell for directory administration, automation and reporting.\nShould be able to participate in L4 escalations in SME capability and should be able to provide sound reasoning and conduct RCA during problem investigation meetings.\nExtensive experience in large scale Azure cloud-based application solutions and integration with other Cloud or On-premises products and custom solutions\nKnowledge of Windows Server administration, security baselines, patching and controlled infrastructure change.\nKnowledge of one or more automation and scripting languages such as PowerShell, Visual Basic, Power Automate etc.\nFamiliarity with Active Directory security hardening concepts, including tiered security, privileged access workstations (PAWs), administrative forests, and just-in-time access\nExperience in one or more of these areas is desirable (SCCM, SCOM, RMAD, Splunk, ARS, Shielded VM / Hyper-V, ADLDS, IPSec)\nITIL Foundation Certification\nFlexibility in scheduling with a willingness to work extra non-standard hours\nAbility to deal efficiently with challenging situations such as restoring services\nAbility to work well within a multi-disciplinary, multi-cultural team structure, but also independently\nAbility to meet deadlines with demonstrable productivity\nStrong documentation, testing, risk awareness and stakeholder communication skills.\nSome travel may be required based on project or team requirements\nTo qualify for the role, you must have\nDegree in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent practical experience.\n4 to 6 years of experience in Directory services, Microsoft Entra ID, Windows infrastructure, IAM engineering\nHands-on experience administering Active Directory and supporting Microsoft Entra ID or hybrid identity.\nExperience with PowerShell scripting and production Change Management.\nExperience implementing technical controls across development, test and production environments.\nIdeally, you’ll also have\nCertifications in Active Directory and Cloud Infrastructures and understanding of core Microsoft technologies. A plus would be experience with Quest Change Auditor, SCCM, Splunk, RMAD and Active Roles Server.\nWhat we look for\nThe Active Directory/Cloud Infrastructure Engineer has responsibilities to implement, configure, manage, and troubleshoot issues within the environment. This will include working closely with other teams to deploy new technologies, enhancements and maintain a stable and secure infrastructure.\nWhat we offer\nEY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations - Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom - and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.\nContinuous learning: You’ll develop the mindset and skills to navigate whatever comes next.\nSuccess as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.\nTransformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.\nDiverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.\nAbout EY\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.\nIf you can demonstrate that you meet the criteria above, please contact us as soon as possible.\nThe exceptional EY experience. It’s yours to build.\nIn compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.","description_format":"text","description_chars":11981,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-11-12T12:49:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-12T14:24:24Z"},"pay":null,"html_url":"https://alion.io/job/ey-iam-directory-implementation-engineer-supervising-associate","json_url":"https://alion.io/job/ey-iam-directory-implementation-engineer-supervising-associate.json","meta":{"generated_at":"2026-11-12T14:24:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29934,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-iam-directory-implementation-engineer-supervising-associate"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-iam-directory-implementation-engineer-supervising-associate"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-iam-directory-implementation-engineer-supervising-associate"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-iam-directory-implementation-engineer-supervising-associate\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-iam-directory-implementation-engineer-supervising-associate"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4163253}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4163253},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}