Active Directory Engineer
Posted 24 Sep 2026
Advertised as “Consulting_Digital Identity & Privileged Access Management Senior Active Directory Engineer”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 4–7 yrs
- Management level
- People management
No salary listed for this role.
At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
Join EY's Technology Consulting team and work on large-scale Digital Identity & Privileged Access Management (DIPAM) projects with global clients. This role focuses on Active Directory modernization, migrations, assessments, and IAM transformation initiatives.
Key Responsibilities
- Lead and support Active Directory and IAM projects across global engagements.
- Perform AD assessments, migrations, consolidations, and domain modernization activities.
- Design, implement, and support Active Directory and Azure AD environments.
- Analyze large datasets using PowerShell, Python, and Excel to identify risks, patterns, and optimization opportunities.
- Provide recommendations aligned with AD and IAM best practices.
- Work closely with clients and stakeholders to gather requirements and translate business needs into technical solutions.
- Develop technical designs, architecture documentation, and implementation plans.
- Support business development activities, RFP responses, and proposal development.
- Mentor junior team members and contribute to team growth and capability building.
Required Skills & Experience
- Strong hands-on experience with:
- Active Directory domain assessments
- Active Directory migrations, deployments, and consolidations
- Azure Active Directory / Entra ID administration and operations
- DNS, DHCP, Group Policies, FSMO roles
- Authentication protocols (LDAP, Kerberos, NTLM)
- PowerShell and/or Python scripting
- Experience using migration tools such as Quest AD Migration or Binary Tree.
- Ability to assess AD environments, identify risks, and recommend remediation strategies.
- Experience in IAM implementation, configuration, customization, and support.
- Understanding of web applications, application servers (Tomcat, WebLogic), and Windows Server environments.
- Exposure to Linux/Unix environments and shell scripting.
- Experience working directly with clients and business stakeholders.
- Strong communication and problem-solving skills.