Senior Consultant - Active Directory & Entra ID Expert

Senior Consultant – Active Directory & Entra ID Expert

Your scope of duties:

• Design, implement, administer, and optimize Active Directory (on-premises) and Microsoft Entra ID (Azure AD) environments in hybrid and cloud models
• Perform day-to-day and advanced Active Directory administration, including:
• User, group, and computer account management
• GPO design, implementation, and troubleshooting
• OU structure design and delegation of administration
• DNS and replication monitoring and remediation
• Lead and support identity transformation and AD modernization projects, including legacy AD cleanup and consolidation
• Implement and manage authentication and authorization solutions, including:
• Conditional Access
• MFA and passwordless authentication
• Identity Protection aligned with Zero Trust principles
• Design and deploy Identity Governance & Administration (IGA) solutions:
• Joiner/Mover/Leaver processes
• Access reviews
• Privileged Identity Management (PIM)
• Support Active Directory security hardening, tiering models, and remediation of misconfigurations and legacy protocols
• Conduct AD health checks, security assessments, and operational reviews
• Collaborate with cloud, security, and infrastructure teams to deliver end-to-end identity solutions
• Act as a technical lead and subject matter expert in client engagements, workshops, and architecture discussions
• Mentor junior consultants and contribute to internal standards and best practices
• EY.AI – in this role, your capabilities are augmented by artificial intelligence. With AI‑powered solutions your analyses, insights and innovative ideas will reach a higher level. Starting with a series of training sessions, you will then use EYQ, your virtual assistant, along with other unique tools often available exclusively at EY. We continuously invest in innovation to provide you with a work environment where you can focus on the most interesting aspects of your job and create the best solutions for clients.

Our requirements:

• 5+ years of hands‑on experience in Active Directory administration within complex enterprise environments
• Strong expertise in:
• AD Domain Services (AD DS)
• Group Policy Management
• AD replication, DNS, FSMO roles, and trusts
• Proven experience with Microsoft Entra ID (Azure AD) and hybrid identity models
• Hands‑on experience with:
• Azure AD Connect / Cloud Sync
• Hybrid identity troubleshooting
• Conditional Access and MFA
• Strong understanding of identity lifecycle management, RBAC, and least‑privilege principles
• Solid knowledge of identity security, Zero Trust architecture, and modern authentication protocols (OAuth 2.0, OpenID Connect, SAML)
• Experience in consulting or professional services environments
• Strong communication skills and ability to engage with technical and non‑technical stakeholders

We will also appreciate:

• Microsoft certifications (e.g. SC‑300, AZ‑500, MS‑102)
• Experience with AD forest/domain migrations, consolidations, or divestitures
• Knowledge of PowerShell scripting for AD and Entra ID administration and automation
• Experience with AD security tools (e.g. Defender for Identity, Purple Knight, PingCastle)
• Familiarity with regulatory frameworks (ISO 27001, NIST, GDPR, SOX)

What we offer:

• Professional and financial support in obtaining recognised qualifications and certificates;
• EY Badges – global certification of your competencies and the opportunity to earn an MBA title from the prestigious Hult University;
• Career Counselor – professional, one‑to‑one guidance on career building and development;
• Innovate EY – unique programmes where you can create your own start‑up using our know‑how and funding;
• Psycho‑educational platform – a package of free consultations with specialists in the broad field of mental health and personal development and access to educational activities;
• A convenient hybrid working model;
• Benefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, language learning platform, sports cards and much more (available online and offline).

EY is an equal opportunity employer, we value and promote diversity in the knowledge and experience of our community. We operate the 'Level Up Without Barriers' program, which supports employees with disabilities to achieve their career ambitions and dreams.

EY provides all applicants with equal opportunities in the recruitment process, regardless of gender, age, race, religion, sexual orientation, national origin, disability or any other legally protected basis, in accordance with applicable law.