Join EY and build a unique career in a global, inclusive, and technology-driven environment. We are seeking a dedicated Windows & Linux Compliance SME to manage compliance, risk, and control activities for our global on-premises Windows Server estate. This role offers a significant opportunity to leverage deep technical expertise in Microsoft Windows Server technologies, Active Directory, and associated management capabilities. You will play a crucial part in maintaining a secure, supported, and consistently configured environment through proactive vulnerability remediation, security hardening, and automation. Collaborate with cross-functional teams to ensure robust governance and audit reporting, making a tangible impact on building a better working world.

Serve as the primary compliance subject matter expert for a global, enterprise-scale Microsoft Windows Server environment, potentially exceeding 10,000 servers. Proactively monitor Microsoft security advisories, vulnerabilities, and vendor notifications to identify and assess risks affecting Windows Server 2019, 2022, and 2025. Engineer and coordinate large-scale remediation efforts for security vulnerabilities and configuration changes using tools like Microsoft Configuration Manager and PowerShell. Design, implement, and maintain Group Policy Objects across Active Directory forests and domains. Create and automate security configuration items and compliance rules using PowerShell DSC. Plan and schedule deployment waves for patches and updates while ensuring production stability. Maintain compliance visibility across physical and virtual Windows servers, supporting secure account and access management, and performing security analysis for hardening. Coordinate cross-platform remediation dependencies with Linux teams and support hybrid management through Microsoft Azure capabilities.

Prepare detailed implementation plans, technical procedures, and stakeholder communications. Track remediation actions, manage exceptions, and escalate material risks or delays. Maintain accurate compliance records and evidence for internal and external audits. Identify opportunities for standardization and automation in vulnerability assessment, deployment, and reporting. Foster effective working relationships with Engineering, Operations, Information Security, and other key teams.

Possess advanced hands-on administration and compliance experience with Microsoft Windows Server 2019, 2022, and 2025 in large-scale, globally distributed production environments. Demonstrate expert knowledge of Active Directory, Group Policy design and management, and secure access controls. Proven experience in assessing security risks, remediating Windows Server vulnerabilities, and applying security baselines without compromising service availability. Strong scripting and automation capabilities in PowerShell and Python are essential, with experience in Ansible being mandatory. Proficiency in administering Microsoft Configuration Manager for enterprise-scale software deployment is required. Experience creating configuration items and desired-state controls using PowerShell DSC or similar configuration-as-code tools is necessary. Ability to interpret Microsoft security advisories and translate them into actionable deployment plans is key. Solid knowledge of Windows Server hardware management, firmware, and lifecycle controls is expected.

Good understanding of VMware ESXi, Nutanix AHV, and Hyper-V virtualization. Working knowledge of Microsoft Azure and hybrid-cloud management concepts, including Azure Arc, Azure Policy, and update management. Familiarity with Linux security and administration, Red Hat Satellite, and Ansible Automation Platform for coordinating shared dependencies is required. Experience with ITIL, Agile, Kanban, Scrum, and DevOps practices is essential. You should be adept at creating clear technical documentation, procedures, and management reports, with strong analytical and problem-solving skills. Excellent communication, stakeholder coordination, and influencing skills are vital for effectively working across global, geographically dispersed teams.