Build a remarkable career with EY, a global leader in professional services. We're seeking a skilled Windows and Linux Compliance SME to join our team. This role is pivotal in ensuring the security, stability, and compliance of our extensive on-premises Windows Server environment. You'll leverage deep technical expertise to manage compliance, risk, and control activities, contributing to a better working world for our clients and society.

As a crucial member of our team, you will work with global scale and support, fostering an inclusive culture and utilizing cutting-edge technology. Your unique perspective will help EY continually improve. Join us to create an exceptional experience for yourself and contribute to a better working world for everyone.

Your core responsibilities will include serving as the compliance subject matter expert for our global on-premises Microsoft Windows Server estate, supporting environments at an enterprise scale, potentially exceeding 10,000 servers.

Key duties involve monitoring Microsoft security advisories, vulnerability findings, and vendor notifications to identify potential exposures. You'll assess technical impacts, engineer and coordinate large-scale remediation efforts for vulnerabilities and configuration changes using tools like Microsoft Configuration Manager and Ansible. Designing, implementing, and maintaining Group Policy Objects and creating security configuration items, baselines, and automated controls are also central to this role.

You will plan and schedule deployment waves for patches and security configurations, ensuring a balance between remediation urgency and production stability. Maintaining compliance visibility across physical and virtual Windows servers, supporting secure account and access management, and performing security and performance analysis are integral. Furthermore, you'll coordinate cross-platform dependencies with Linux teams and prepare detailed implementation plans and stakeholder communications.

We are looking for a candidate with advanced, hands-on administration and compliance experience in Microsoft Windows Server 2019, 2022, and 2025 within large, globally distributed production environments. Expert knowledge of Active Directory, Group Policy design, domain structures, and privileged-access controls is essential.

Proven experience in assessing security risks, remediating Windows Server vulnerabilities, applying security baselines, and tuning systems securely without compromising service availability is required. A deep scripting and automation capability in PowerShell and WMI, along with experience using Ansible, is a must. Strong experience administering Microsoft Configuration Manager for enterprise-scale deployments is also critical.

Familiarity with creating configuration items and desired-state controls using PowerShell DSC, interpreting Microsoft security advisories, and understanding Windows Server hardware management are necessary. Good knowledge of VMware ESXi, Nutanix AHV, and Hyper-V virtualization, along with working knowledge of Microsoft Azure and hybrid-cloud management concepts, is expected. Experience with ITIL, Agile, Kanban, Scrum, and DevOps practices is highly valued, as are strong analytical and problem-solving skills, clear communication, and the ability to influence stakeholders effectively across globally dispersed teams.