Security Engineer - EY Global Delivery Services

About the role

EY's Security Technology Services (STS) Lab is the engineering engine behind EY's global cybersecurity platform. As a Lab Operations & Access Engineer (Supervising Associate, Rank 64) in the GDS Argentina team, you will be the hands-on backbone of the lab's day-to-day operations, owning account provisioning, RBAC governance, shared asset management and request fulfillment so engineers, architects and SMEs can work in well-governed, properly segmented lab environments.

Key responsibilities

• Provision, maintain and decommission lab accounts in Azure AD / Entra ID, Microsoft 365 and Fabric tenants
• Design, implement and audit RBAC across Azure, Fabric, Defender and Sentinel environments, enforcing least privilege
• Track and govern shared resources such as VMs, credential vaults and network segments
• Act as first point of contact for lab support requests, triaging access issues and provisioning requests with defined SLAs
• Deploy lab resources through the Azure Portal and ARM/Bicep templates, coordinating change approvals and keeping deployment logs
• Manage access request pipelines and change tracking via GitHub Issues and pull requests, and contribute to GitHub Actions workflows
• Support onboarding of lab endpoints and identities to Microsoft Defender for Endpoint and Defender for Identity, validating policies and alert suppression rules
• Maintain runbooks, access matrices and asset registers
• Coordinate with IAM, Defender/Sentinel, Purview and Endpoint Security SMEs

Required profile

• 3-5 years of experience in IT Operations, Cloud Operations or Security Engineering with hands-on access management or lab support
• Fluent English, written and verbal
• Structured, detail-oriented, able to handle multiple concurrent requests
• Comfortable collaborating across globally distributed teams without formal authority

Required skills

• Azure Portal, Entra ID, RBAC and resource management
• GitHub for issue tracking, pull requests and basic GitHub Actions
• Working knowledge of Microsoft Defender for Endpoint, Defender for Identity or Defender for Cloud
• Managing shared infrastructure assets and maintaining asset inventories
• Documenting processes and producing runbooks

Ideally: Bachelor's degree in a technical field, AZ-104, SC-300 or SC-200 certification, Microsoft Fabric, PowerShell or Python scripting, Sentinel/Purview/Entra PIM exposure, ITSM tooling such as ServiceNow, and a security certification such as GSEC or CompTIA Security+. The role offers continuous learning, coaching, flexible working arrangements and competitive compensation aligned to the Argentine senior technology market.