Consultant - Identity and Access Management (IAM) Entra ID

EY-Cyber Security-IAM- Entra ID

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

EY-Cyber Security-IAM- Entra ID

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

About Global Delivery Services

Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.

Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.

Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.

Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.

Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

We’re looking for consultants in the cyber security team to work on various Identity and Access Management projects for our customers across the globe. Also, the professional shall need to report any identified risks within engagements and share any issues and updates with the leadership/management on a timely basis

In line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.

As a member of the Identity and Access Management (IAM) team this position will contribute towards execution of an IAM roadmap that meets security requirements, implementation and adoption of secrets management, management of machine identities and definition of access policies that meet their needs and are in line with overall IAM Program.

Your Key Responsibilities

• Engage and contribute to the Identity & Access Management projects
• Work effectively as a team member, sharing responsibility, providing support, maintaining communication and updating senior team members on progress
• Execute the engagement requirements, along with review of work by junior team members
• Help prepare reports and schedules that will be delivered to clients and other interested parties
• Develop and maintain productive working relationships with client personnel
• Build strong internal relationships within EY Consulting Services and with other services across the organization
• Help senior team members in performance reviews and contribute to performance feedback for staff/junior level team members
• Contribute to people related initiatives including recruiting and retaining IAM professionals
• Maintain an educational program to continually develop personal skills
• Understand and follow workplace policies and procedures
• Manage the performance management for the direct reportees, as per the organization policies
• Foster teamwork and lead by example
• Training and mentoring of project resources
• Participating in the organization-wide people initiatives

Skills and attributes for success

• Strong understanding of Identity Access Management solutions
• Hands-on experience on Azure Active Directory end-to-end implementation involving designing, implementation and customization
• Completed at least 0-2 implementations
• Understanding and experience in different technology of Azure Active Directory, B2E, B2B and B2C
• Implementation experience in ADFS, Azure AD Connect, Azure AD Application Proxy, Conditional Access Policy, LDAP, Active Directory, Application Integrations for SSO and multi-factor authentication
• Working experience in application integration with header-based, SAML2.0, OIDC, OAuth2.0, WS-Fed protocols
• Experienced in managing external identities and consumers in Azure AD B2B and B2C tenants
• Onboarding and offboarding applications on AAD B2B and B2C platforms
• Implementing custom policy using Identity

Experience

• Framework for AAD B2C
• Experience in social login and 3rd party identity provider integration with AAD B2C
• Should have experience in assisting application team to use Microsoft libraries like MSAL
• Experience in integrating mobile application with AAD B2C
• Experience in integrating Azure AD with API management solution
• Should have knowledge on different component of Azure being used for Azure AD solution such as tenant creation, subscription, resource group.
• Should have knowledge in Identity management and Privileged Identity Management concepts
• Experienced in renew, update and troubleshoot certificate related issues
• Should have knowledge of different integration and architecture in customer’s IAM environment such as WAF, Load Balancer, network components
• Understanding of latest technology such as Zero trust framework, Fine-grained authorization, Password less authentication, CIAM
• Experience and exposure of using/exposing REST APIs including Azure AD graph APIs.
• Hands-on knowledge of any programming language Java or Python with good understanding of PowerShell.
• Should be familiar with application servers such as Tomcat and IIS.
• Ability to develop documentation such as business requirement document, high and low level design document, training and user procedures document.
• Deployment of web application & basic troubleshooting of web application issues.
• Should be flexible to work on new technologies in IAM domain.
• Should have had direct client experience, including working with client teams in an on-site or offshore mode.
• Need to liaise with Business stakeholders and seek requirement clarification. Should be able to map business requirements to technical specifications.
• Use case design, Solution

Requirements

• Specification and mapping business requirements to technical requirements (Traceability Matrix).

• Involvement in a successful pursuit of a potential client by being part of the RFP response team.

• Architecture Design for overall IAM solution in customer environment (optimising the resources made available – servers and load sharing etc.).

• To qualify for the role, you must have

• B. Tech./ B.E. with sound technical skil