Join EY as an IAM Product Owner (Manager) and contribute to building a better working world. You'll leverage global scale, inclusive culture, and advanced technology to foster your career growth. Your unique perspective will help EY excel, creating exceptional experiences for yourself and a better working world for all.

This role focuses on Platform Ownership for IDAM & PAM Security, driving the evolution of identity security operations and technology stacks. We emphasize adherence to best-in-class security practices across the entire lifecycle of IAM solutions.

Lead identity security operations and advance the IAM technology landscape, ensuring top-tier security practices in architecture, implementation, monitoring, and maintenance.

Design, deploy, and maintain robust Identity & Access Management (IAM) solutions.

Key areas include: - Expertise in Active Directory (ADDS) and Azure AD, including DR/BCP. - Deep knowledge of Microsoft Entra ID, Zscaler Privileged Remote Access, and advanced identity governance. - Implementation of Microsoft Zero Trust architecture and Zscaler Zero Trust principles. - Proficiency with Microsoft Defender Suite, Zscaler PRA, and CSPM. - Experience in Microsoft Sentinel for SIEM/SOAR, threat hunting, and KQL scripting. - Strong grasp of PKI, MFA, and passwordless authentication. - Familiarity with NIST, CIS benchmarks, and compliance frameworks. - Hands-on experience in Insider Risk Management and MITRE ATT&CK. - Collaborate with CyberArk product owners for roadmap decisions and enterprise adoption. - Develop automated solutions using REST APIs, PowerShell/Python, GitHub, and IaC for privileged onboarding and secrets management. - Enforce IAM/PAM controls across Azure and AWS, integrating with native PIM and extending to hybrid/multi-cloud environments. - Design and implement enterprise Secrets Management solutions for non-human identities. - Drive AI-driven integrations with PAM for pattern recognition. - Identify and resolve security gaps in privileged access and secrets management. - Develop and support KPIs/KRIs for IAM, PAM, and Secrets Management initiatives. - Communicate effectively with stakeholders to clarify objectives, provide updates, and influence best practices. - Drive initiatives to enhance end-user experience and strengthen organizational security posture.

A Bachelor’s degree in Cybersecurity, Computer Information Systems, or a related field is required, coupled with over 10 years of progressive technology experience, including 8+ years focused on designing and implementing global-scale Cybersecurity solutions.

Demonstrate a deep understanding of Identity & Access Governance, with a strong emphasis on Privileged Access Management across on-premise, cloud (Azure, AWS), and IaaS/PaaS platforms.

Key qualifications include: - Proven ability to design and implement complex IAM/PAM architectures, integrating with SIEM/SOAR, ITSM, DevOps pipelines, and secrets management solutions. - Broad knowledge of IAM capabilities, identity stores, authentication/authorization, strong authentication, privileged access methodologies, and Zero Trust principles. - Hands-on experience with PowerShell, Python, and REST APIs for automation, including version control with GitHub and orchestration of PAM workflows and secrets management. - Experience implementing enterprise-grade Secrets Management solutions for non-human identities. - Solid experience with ADFS, Azure Entra ID, AWS IAM, databases, operating systems (Windows/Linux), application systems, and network infrastructure. - Familiarity with AI-driven security approaches for human and non-human identities. - Ability to prioritize and execute tasks in a fast-paced environment, balancing risk reduction with business objectives. - Exceptional verbal and written communication skills, capable of translating complex technical concepts for diverse stakeholders. - Strong autonomous work ethic while influencing cross-functional teams and driving security best practice adoption across large organizations. - Ability to collaborate with various global stakeholders across business areas and regions.

Primary Skills: Deep knowledge of Microsoft Entra ID, Delinea PAM, Zscaler Privileged Remote Access, and advanced identity governance. Secondary Skills: CyberArk, CA-PAM, Cisco DNAC, ISE.