Senior Consultant - Active Directory / Entra

The Senior Consultant, Active Directory Modernization, designs, implements, administers, and optimizes Microsoft Entra ID centric identity solutions in cloud first and hybrid environments, with on-premises Active Directory as a supporting component. The role acts as a hands on technical lead and subject matter expert on identity modernization - building and operating modern, cloud based identity capabilities aligned with Zero Trust - while mentoring junior consultants and contributing to EY standards, accelerators, and best practices., Modernization Delivery

• Lead and deliver modern IAM solutions based on Microsoft Entra ID, aligned with Zero Trust principles.
• Design, implement, administer, and optimize Entra ID centric identity in cloud first and hybrid environments.
• Design, implement, and support hybrid identity architectures, including synchronization and coexistence between Entra ID and on premises Active Directory.

Authentication, Authorization & Governance

• Implement and manage modern authentication and authorization: Conditional Access, MFA and passwordless, Identity Protection and risk-based access controls.
• Design and deploy Identity Governance & Administration (IGA) within Entra ID: JML processes, Access Packages and access reviews, and Privileged Identity Management (PIM).

Active Directory Support & Hardening

• Provide hands on AD support: AD DS administration, Group Policy design and troubleshooting, OU structure and delegation, DNS and replication health monitoring, backup and restore.
• Support security and posture improvement: AD and Entra ID hardening, tiering models and privileged access controls, health checks, risk assessments, and remediation planning.
• Provide Level 3 & 4 support within agreed SLAs and deliver root cause analysis (RCA) on escalated issues.

Advisory, Collaboration & Mentoring

• Act as a technical lead and subject matter expert during client engagements, workshops, and architecture discussions.
• Collaborate with cloud, security, and infrastructure teams to deliver end to end identity solutions.
• Contribute to internal EY standards, accelerators, and best practices; report engagement risks to senior team members., Users/groups/computers administration, Group Policy design & troubleshooting, OU structure & delegation of administration, DNS and replication health monitoring, bulk updates via scripts, backup/restore of the AD database.

Entra ID (Azure AD)

Design, implement, administer, and optimize Entra ID centric identity in cloud first and hybrid environments; Entra Connect/Cloud Sync synchronization and coexistence; troubleshooting sync issues, troubleshoot MiM and password sync issues.

Modern Authentication

Conditional Access, MFA and passwordless authentication, Identity Protection and risk based access controls; SSO/federation (SAML, OIDC, OAuth, WS-Fed); ADFS coexistence.

Identity Governance (IGA)

Joiner/Mover/Leaver (JML) processes, Access Packages and access reviews, Privileged Identity Management (PIM) within Entra ID.

Security & Posture Hardening

AD and Entra ID security hardening, tiering models (Tier 0/1/2) and privileged access controls, health checks, risk assessments, and remediation planning; NIST/CIS awareness.

Hybrid Identity Architecture

Design and support of hybrid identity architectures, synchronization and coexistence between Entra ID and on-premises Active Directory, and optimization of directory services.

Scripting & Automation

PowerShell (AD & Graph), LDAP query construction, bulk operations, certificate/PKI troubleshooting.

Delivery & Documentation

Level 3/4 support within SLAs, RCA on escalated issues, technical documentation (HLD/LLD, runbooks, user procedures), workshop facilitation.

• A recognized university degree in Computer Science, Information Technology, Computer/Electrical Engineering, or equivalent experience.
• 3-6 years of hands on Active Directory / Entra ID experience across design, implementation, administration, and support.
• Demonstrated ability to work independently, adapt quickly, and coordinate within globally distributed teams.
• Strong verbal and written communication and technical documentation skills.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104); Security, Compliance, and Identity Fundamentals (SC-900)
• Legacy AD certifications valued: MCSA / MCSE / MCITP Server Administrator

Success Measures

• High quality, on time delivery of modernization workstreams reviewed to EY quality standards.
• Measurable modernization outcomes: legacy authentication reduced, hybrid identity stabilized, standing privileges lowered, and posture improved.
• Effective escalation resolution (RCA), knowledge transfer, and mentoring of junior team members., * hands-on AD DS : 3 years (Required)
• hands-on MS Entra ID (Azure ID): 3 years (Required)
• hybrid AD/Entra ID identity: 3 years (Required)
• Conditional Access, MFA, and modern authentication: 2 years (Required)
• Entra ID IGA, including PIM and access reviews: 2 years (Required)
• PowerShell supporting AD and Entra ID: 2 years (Required)

• 401(k) matching
• Dental insurance
• Health insurance
• Vision insurance