EY IAM Automation DevOps Senior Engineer 

Poland, Masovian Voivodeship, Zgorzała 

653632317

IAM Automation DevOps Senior Engineer

Hybrid model: 2 days office/3 days remote

In your role as IAM Automation DevOps Senior Engineer, you will lead the design, development and delivery of automation for complex global IAM secure access solutions for a huge global firm and providing best in class support for our clients primarily using the Microsoft Azure platform and any other cloud platform we adopt. As IAM Automation DevOps expert, your focus will be on implementing advanced DevOps process and automating IAM solutions including Azure cloud federation and access management solution leveraging Azure services and features like Azure Active Directory, Business to Business (B2B), Business to Consumer (B2C), Conditional Access, and Inbound / Outbound federation setup with Active Directory Federation services (ADFS) and other federation solutions such as Ping and Auth0.

Your key responsibilities

As a Senior IAM DevOps Engineer, you will be responsible for:

• Leading the integration of Azure IAM services into DevOps workflows, ensuring that security measures are embedded throughout the software development lifecycle.
• Designing and implementing automation for IAM tasks using tools like Azure Automation, PowerShell, Azure CLI, and ARM templates, and secure Continuous Integration / Continuous Delivery (CI/CD) pipelines by managing access controls.
• Automating compliance and auditing processes for IAM services and establishing monitoring and incident response with Azure Security Center and Azure Sentinel.
• Collaborating with cross-functional teams, effectively working both independently and as part of a team, while liaising with product/service vendors like Microsoft, Ping Federate, Auth0 for service issue escalations.
• Serving as an IAM Automation subject matter expert, providing advisory services, demonstrating a systematic approach to problem-solving, and quickly absorbing new technical information as well as ability to quickly grasp technical issues and act on them, resolving or escalating to leadership as necessary.
• Planning and scheduling work to meet targets, ensuring that solutions are well-documented for sustainability, and facilitating the successful transition of project deliverables to support and operations teams, emphasizing the connection between technical solutions and business objectives.
• Actively building rapport with clients, applying a deep understanding of their needs to identify critical outcomes and barriers to success; gather client feedback to provide credible solutions and high-quality deliverables.
• Identifying and leveraging leading practices, diverse perspectives, and lessons learned to enhance technical solutions.

Skills and attributes for success

• Strong understanding of client needs, ability to challenge client insightfully to better understand requirements to manage changes in expectations or scope, and the ability to apply this knowledge in delivering quality solutions within agreed-upon timelines.
• Tailored insightful communication approach with respective audiences, ensuring clarity and understanding when sharing technical experience or details.
• Innovative thinking thru identifying areas of opportunity and generating ideas and solutions that promote operational excellence and resource optimization
• Advanced technical proficiency in Azure Automation and experience with Azure DevOps services for CI/CD, including Repos, Pipelines, Artifacts, and Boards.
• Expertise in scripting languages (PowerShell, Python, Bash, Ruby) and Azure CLI for automation scripts, alongside in-depth knowledge of ARM templates for Azure resource management.
• Experience with Identity Providers such as Azure AD, Ping Identity, and Auth0, as well as cloud IAM services across Azure, AWS, and Google Cloud Platform.
• Strong understanding of directory services (LDAP, Active Directory, Azure AD) for user account management and Azure AD for user/group management, application registrations, and service principals.
• Knowledge of Azure RBAC, SSO, MFA, and Azure AD Conditional Access policies for secure access management, along with Azure AD PIM for privileged access monitoring.
• Skills in managing Azure Key Vault for secrets and certificates, and proficiency with Microsoft Graph API for accessing Azure AD and Office 365 services.
• Experience with Azure monitoring and logging services, Azure Security Center, and Azure Sentinel for performance insights, threat protection, and incident response.
• Familiarity with Infrastructure as Code (IaC) tools like Terraform, Azure ARM templates, and AWS CloudFormation for cloud infrastructure automation.
• Proficiency with version control systems like Git and experience with CI/CD tools such as GitHub Actions, Jenkins, GitLab CI, or CircleCI.
• Knowledge of containerization and orchestration tools like Docker, Kubernetes, or Azure Kubernetes Service (AKS) for container management, and experience with secrets management tools like Azure Key Vault.
• Curiosity and Continuous Learning by actively seeking personal development opportunities and participating in EY-wide and function-specific initiatives and learning.

To qualify for the role you must have

• A degree in Computer Science or related discipline, or equivalent work experience
• Strong knowledge and experience of Software development Lifecycle, Automation and DevOps including familiarity with IAM domains and basic IT knowledge
• Excellent interpersonal, verbal and written communication skills
• A professional attitude towards work and corporate culture.
• Flexibility in scheduling, with a willingness to work extra non-standard hours when necessary
• The ability to work effectively within a multi-disciplinary, multi-cultural team structure, as well as independently.
• A strong desire to learn and grow alongside the organization
• A proven ability to meet agreed deadlines with demonstrable productivity

Ideally, you’ll also have

• Certification in Azure cloud services related to IAM, Automation or DevOps
• Experience in using Information Technology Infrastructure Library (ITIL) process improvement frameworks
• Additional certifications in IT Infrastructure are a plus
• Cybersecurity certifications are advantageous

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across ten locations – Argentina, China, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.