Junior Consultant - Active Directory & Entra ID Expert

Scope of duties

Design, implement, administer, and optimize Microsoft Entra ID–centric identity solutions in cloud-first and hybrid environments, with on‑premises Active Directory as a supporting component Lead and deliver modern identity and access management (IAM) solutions based on Microsoft Entra ID, aligned with Zero Trust principles Implement and manage modern authentication and authorization capabilities, including:

Conditional Access MFA and passwordless authentication Identity Protection and risk-based access controls

Design and deploy Identity Governance & Administration (IGA) capabilities within Entra ID:

Joiner / Mover / Leaver (JML) processes Access packages and access reviews Privileged Identity Management (PIM)

Design, implement, and support hybrid identity architectures, including synchronization and coexistence scenarios between Entra ID and on‑premises Active Directory Support identity transformation initiatives, such as:

Transition from legacy AD‑centric models to cloud‑based identity AD rationalization, cleanup, and consolidation as part of Entra ID adoption Reduction of legacy authentication protocols and technical debt

Provide guidance and hands-on support in Active Directory where required, including:

AD DS administration (users, groups, computers) Group Policy design and troubleshooting OU structure and delegation of administration DNS and replication health monitoring

Support identity security and posture improvement activities, including:

AD and Entra ID security hardening Tiering models and privileged access controls Health checks, risk assessments, and remediation planning

Collaborate with cloud, security, and infrastructure teams to deliver end‑to‑end identity solutions Act as a technical lead and subject matter expert during client engagements, workshops, and architecture discussions Mentor junior consultants and contribute to internal EY standards, accelerators, and best practices EY.AI – In this role, your capabilities are augmented by artificial intelligence. Using EYQ and other AI‑powered tools, you will enhance analyses, insights, and solution design to deliver greater value for clients.

5+ years of hands-on experience in Microsoft Entra ID and enterprise IAM solutions, preferably in complex or hybrid environments Strong expertise in Microsoft Entra ID, including: – Conditional Access design and policy modelling – MFA and passwordless authentication – Identity Protection and risk-based controls – Role-Based Access Control (RBAC) and least‑privilege models Solid understanding of identity lifecycle management, governance concepts, and Zero Trust architecture Proven experience with hybrid identity scenarios, including: – Microsoft Entra Connect / Cloud Sync – Synchronization and coexistence troubleshooting – Hybrid authentication flows Good working knowledge of Active Directory, including: – AD DS fundamentals – Group Policy – AD replication, DNS, FSMO roles, and trusts Understanding of modern authentication and federation protocols (OAuth 2.0, OpenID Connect, SAML) Experience working in consulting or professional services environments Strong communication skills and ability to engage effectively with both technical and non‑technical stakeholders

We will also appreciate

Microsoft certifications (e.g. SC‑300, AZ‑500, MS‑102) Experience with AD forest/domain migrations, consolidations, or carve‑outs PowerShell scripting for Entra ID and AD automation Experience with identity and AD security tools (e.g. Microsoft Defender for Identity, Purple Knight, PingCastle) Familiarity with regulatory and security frameworks (ISO 27001, NIST, GDPR, SOX)

Professional and financial support in obtaining recognised qualifications and certificates; EY Badges - global certification of your competencies and the opportunity to earn an MBA title from the