Security Engineer – Lab Operations

About the role

The EY Security Technology Services Lab needs a hands‑on Lab Operations & Access Engineer to manage day‑to‑day lab environments. You will ensure secure provisioning, RBAC governance and shared asset management for engineers working with IAM, Defender XDR, Sentinel and Purview.

Key responsibilities

• Provision, maintain and de‑commission lab user accounts across Azure AD/Entra ID, Microsoft 365 and Fabric tenants.
• Design, implement and audit RBAC across Azure subscriptions, Fabric workspaces, Defender and Sentinel, enforcing least‑privilege principles.
• Track and govern shared lab resources such as VMs, credential vaults and network segments.
• Handle lab support requests, triage access issues and environment faults within defined SLAs.
• Execute Azure Portal and ARM/Bicep deployments, manage change approvals and maintain logs.
• Manage GitHub issue pipelines, pull‑requests and automation scripts for provisioning.
• Support onboarding of endpoints to Microsoft Defender suite and validate policies.
• Produce and maintain runbooks, access matrices and asset registers.

Required profile

• 3–5 years of IT/Cloud Operations or Security Engineering experience with a focus on access management.
• Strong operational discipline, detail‑oriented mindset and ability to handle multiple concurrent requests.
• Fluent English communication skills, both written and verbal.
• Experience working in globally distributed, culturally diverse teams.

Required skills

• Azure Portal, Entra ID (Azure AD), RBAC, subscriptions and resource management.
• ARM/Bicep template deployment.
• GitHub issue tracking, pull‑requests and basic GitHub Actions.
• Microsoft Defender for Endpoint, Identity or Cloud.
• PowerShell or Python scripting for automation.

What we offer

• Continuous learning through EY’s global platforms and certification sponsorship.
• Flexibility to impact technical specialization or grow into cloud engineering/architecture.
• Coaching and leadership development for global technical leadership.
• Diverse, inclusive culture with flexible working arrangements.
• Competitive compensation aligned to the Argentine senior technology market, including performance‑based incentives.