EY's Global Delivery Services is seeking experienced consultants to join our cyber security team, focusing on Identity and Access Management (IAM) projects. You will work with global clients, contribute to IAM roadmaps, and ensure the implementation and adoption of critical security measures like secrets management and machine identity management. This role offers a dynamic environment within a globally connected powerhouse, providing opportunities for career growth and development.

As a key member of the IAM team, your contributions will be vital in executing strategies that meet stringent security requirements. You will be instrumental in defining access policies and ensuring their alignment with the broader IAM program. We are committed to fostering a culture of quality and continuous learning, where you will play a role in coaching junior team members and contributing to a positive team dynamic.

Engage actively in Identity & Access Management projects, collaborating effectively within a team environment. Share responsibilities, provide support, maintain clear communication, and update senior team members on project progress.

Execute engagement requirements meticulously, overseeing the work of junior team members. Prepare comprehensive reports and schedules for clients and stakeholders, and cultivate strong professional relationships with both client personnel and internal EY teams.

Assist senior team members with performance reviews and provide constructive feedback for junior staff. Participate in people-related initiatives, including recruiting and retaining IAM professionals, while maintaining an ongoing educational program to continuously develop personal skills.

Adhere to workplace policies and procedures, and manage performance for direct reports according to organizational standards. Foster teamwork by leading with example and provide training and mentoring to project resources. Participate in organization-wide people initiatives.

A Bachelor of Technology (B.Tech) or Bachelor of Engineering (B.E.) degree with strong technical acumen is required, alongside excellent verbal and written English communication skills. A minimum of 2-3 years of relevant work experience in Azure Active Directory is essential.

Possess strong interpersonal and presentation skills. You should have hands-on experience in designing, implementing, and customizing Azure Active Directory end-to-end solutions, ideally with 0-2 completed implementations. Familiarity with Azure Active Directory technologies, including B2E, B2B, and B2C, is necessary.

Experience with ADFS, Azure AD Connect, Azure AD Application Proxy, Conditional Access Policy, LDAP, Active Directory, and application integrations for SSO and multi-factor authentication is crucial. You should be proficient in application integration using header-based authentication, SAML 2.0, OIDC, OAuth 2.0, and WS-Fed protocols.

Experience in managing external identities within Azure AD B2B and B2C tenants, onboarding/offboarding applications, and implementing custom policies using the Identity Experience Framework for AAD B2C are key. Knowledge of integrating social logins and third-party identity providers with AAD B2C, assisting application teams with Microsoft libraries like MSAL, and integrating mobile applications with AAD B2C is also important.

Familiarity with integrating Azure AD with API management solutions, understanding Azure components for Azure AD solutions (tenant creation, subscriptions, resource groups), and knowledge of Identity Management and Privileged Identity Management concepts are required. Experience in certificate management and troubleshooting is also necessary.

Understanding of various integration patterns and architectures within customer IAM environments, such as WAF, Load Balancers, and network components, is beneficial. Knowledge of emerging technologies like Zero Trust frameworks, fine-grained authorization, passwordless authentication, and CIAM is advantageous.

Exposure to using/exposing REST APIs, including Azure AD graph APIs, is expected. Hands-on knowledge of a programming language such as Java or Python, along with a good understanding of PowerShell, is required. Familiarity with application servers like Tomcat and IIS is also needed.

Ability to develop documentation, including business requirement documents, high-level and low-level design documents, and training materials. Experience with deployment and basic troubleshooting of web applications is necessary. Flexibility to adapt to new technologies in the IAM domain is essential.

Direct client experience, including working with client teams in on-site or offshore modes, is required. You must be able to liaise with business stakeholders, clarify requirements, and map business needs to technical specifications. Involvement in RFP response teams and designing overall IAM architecture, including resource optimization, is also part of the role.