Ernst & Young

IAM Automation DevOps Senior Engineer

Location: Wrocław / Warsaw

Hybrid model: 2 days office/3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of over 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team helps protect the EY brand and build client trust.

Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value.

The opportunity

The relentless advancement of cutting-edge technologies like Blockchain, Artificial Intelligence (AI), Machine Learning (ML), and Quantum Computing necessitates a strategic shift towards cloud computing, driving innovation, efficiency, and transformation across all sectors for businesses to remain competitive and agile. The Identity and Access Management (IAM) Secure Access Engineering team delivers access management solutions utilizing public cloud platforms, commercial off the shelf products, and custom developed solutions.

In your role as IAM Automation DevOps Senior Engineer, you will lead the design, development and delivery of automation for complex global IAM secure access solutions for a huge global firm and providing best in class support for our clients primarily using the Microsoft Azure platform and any other cloud platform we adopt. As IAM Automation DevOps expert, your focus will be on implementing advanced DevOps process and automating IAM solutions including Azure cloud federation and access management solution leveraging Azure services and features like Azure Active Directory, Business to Business (B2B), Business to Consumer (B2C), Conditional Access, and Inbound / Outbound federation setup with Active Directory Federation services (ADFS) and other federation solutions such as Ping and Auth0.

Your key responsibilities

As a Senior IAM DevOps Engineer, you will be responsible for:

• Leading the integration of Azure IAM services into DevOps workflows, ensuring that security measures are embedded throughout the software development lifecycle.
• Designing and implementing automation for IAM tasks using tools like Azure Automation, PowerShell, Azure CLI, and ARM templates, and secure Continuous Integration / Continuous Delivery (CI/CD) pipelines by managing access controls.
• Automating compliance and auditing processes for IAM services and establishing monitoring and incident response with Azure Security Center and Azure Sentinel.
• Collaborating with cross-functional teams, effectively working both independently and as part of a team, while liaising with product/service vendors like Microsoft, Ping Federate, Auth0 for service issue escalations.
• Serving as an IAM Automation subject matter expert, providing advisory services, demonstrating a systematic approach to problem-solving, and quickly absorbing new technical information as well as ability to quickly grasp technical issues and act on them, resolving or escalating to leadership as necessary.
• Planning and scheduling work to meet targets, ensuring that solutions are well-documented for sustainability, and facilitating the successful transition of project deliverables to support and operations teams, emphasizing the connection between technical solutions and business objectives.
• Actively building rapport with clients, applying a deep understanding of their needs to identify critical outcomes and barriers to success; gather client feedback to provide credible solutions and high-quality deliverables.
• Identifying and leveraging leading practices, diverse perspectives, and lessons learned to enhance technical solutions.

Skills and attributes for success

• Strong understanding of client needs, ability to challenge client insightfully to better understand requirements to manage changes in expectations or scope, and the ability to apply this knowledge in delivering quality solutions within agreed-upon timelines.
• Tailored insightful communication approach with respective audiences, ensuring clarity and understanding when sharing technical experience or details.
• Innovative thinking thru identifying areas of opportunity and generating ideas and solutions that promote operational excellence and resource optimization
• Advanced technical proficiency in Azure Automation and experience with Azure DevOps services for CI/CD, including Repos, Pipelines, Artifacts, and Boards.
• Expertise in scripting languages (PowerShell, Python, Bash, Ruby) and Azure CLI for automation scripts, alongside in-depth knowledge of ARM templates for Azure resource management.
• Experience with Identity Providers such as Azure AD, Ping Identity, and Auth0, as well as cloud IAM services across Azure, AWS, and Google Cloud Platform.
• Strong understanding of directory services (LDAP, Active Directory, Azure AD) for user account management and Azure AD for user/group management, application registrations, and service principals.
• Knowledge of Azure RBAC, SSO, MFA, and Azure AD Conditional Access policies for secure access management, along with Azure AD PIM for privileged access monitoring.
• Skills in managing Azure Key Vault for secrets and certificates, and proficiency with Microsoft Graph API for accessing Azure AD and Office 365 services.
• Experience with Azure monitoring and logging services, Azure Security Center, and Azure Sentinel for performance insights, threat protection, and incident response.
• Familiarity with Infrastructure as Code (IaC) tools like Terraform, Azure ARM templates, and AWS CloudFormation for cloud infrastructure automation.
• Proficiency with version control systems like Git and experience with CI/CD tools such as GitHub Actions, Jenkins, GitLab CI, or CircleCI.
• Knowledge of containerization and orchestration tools like Docker, Kubernetes, or Azure Kubernetes Service (AKS) for container management, and experience with secrets management tools like Azure Key Vault.
• Curiosity and Continuous Learning by actively seeking personal development opportunities and participating in EY-wide and function-specific initiatives and learning.

To qualify for the role you must have

• A degree in Computer Science or related discipline, or equivalent work experience
• Strong knowledge and experience of Software development Lifecycle, Automation and DevOps including familiarity with IAM domains and basic IT knowledge
• Excellent interpersonal, verbal and written communication skills
• A professional attitude towards work and corporate culture.
• Flexibility in scheduling, with a willingness to work extra non-standard hours when necessary
• The ability to work effectively within a multi-disciplinary, multi-cultural team structure, as well as independently.
• A strong desire to learn and grow alongside the organization
• A proven ability to meet agreed deadlines with demonstrable productivity

Ideally, you’ll also have

• Certification in Azure cloud services related to IAM, Automation or DevOps
• Experience in using Information Technology Infrastructure Library (ITIL) process improvement frameworks
• Additional certifications in IT Infrastructure are a plus
• Cybersecurity certifications are advantageous

What we look for

We are looking for proactive, organized, and detail-focused individuals eager to excel in a dynamic team setting. Ideal candidates will thrive in a fast-paced, evolving environment and possess exceptional communication and collaboration skills, including an outgoing personality and strong written, verbal, and listening abilities. Candidates should be passionate, have a clear vision, and stay informed about the latest cloud and technology trends, applying this knowledge to deliver effective business solutions. They should also be capable of identifying shortcomings and risks in current processes or solutions, challenging proposed plans, and contributing to industry best practices with practical solutions.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across ten locations – Argentina, China, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.