EY
Cyber SDC- Purview and Defender for Office Operations Lead Eng - Senior - Consul
EY, Baltimore, Maryland, United States, 21276
Cyber SDC- Purview and Defender for Office Operations Lead Eng - Senior - Consulting - Location Open
EY is looking for a Cybersecurity Operations Engineer to manage the administration, troubleshooting, and continuous improvement of Microsoft Purview, Microsoft Defender for Office, and eShare. The role will support users, manage configuration changes, and collaborate with cross‑functional teams to enhance our information protection posture.
Location:
Anywhere in Country
Key Responsibilities
Platform Administration
Administer Microsoft Purview, Defender for Office, and eShare to ensure optimal performance and availability.
Configure and manage security settings, policies, and policy exceptions.
Follow change‑management lifecycle; test in DEV and QA before promotion to Production and document changes in ServiceNow.
User Support
Respond to incident tickets where security tools affect user tasks, ensuring tickets are resolved per SLAs.
Troubleshoot user issues, implement configuration changes if needed, and keep users informed of progress.
Escalate to client stakeholders as required.
Create and maintain user support documentation, including KB articles and SharePoint materials.
Collaboration & Communication
Work closely with IT, security, and email teams to integrate Purview, Defender, and eShare with existing systems.
Report operational status, escalations, blockers, and improvement recommendations to stakeholders.
Continuous Improvement
Monitor and report on data classification usage and DLP policy hits.
Stay updated on the latest features and best practices for the involved platforms.
Identify opportunities for process improvements and automation.
Automate repetitive activities using PowerShell, Python, Tines, PowerAutomate, etc.
Documentation & Reporting
Maintain accurate SOPs and configurations related to Purview, Defender, and eShare.
Generate performance and metrics reports for management review.
Maintain an updated project plan and communicate timelines to stakeholders.
Team Leadership
Collaborate with an international team across multiple time zones.
Assign and track tasks, provide updates, and offer technical support as an SMR.
Escalate issues and roadblocks to EY leadership as needed.
Qualifications
Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field.
3+ years of experience supporting Microsoft Purview and Defender for Office.
Strong problem‑solving, communication, and interpersonal skills.
Experience with PowerShell, Python, and automation tools (Tines, PowerAutomate, etc.).
Ticket and change‑management experience in ServiceNow.
Managed an international team across multiple time zones.
Preferred Skills
Knowledge of eShare technologies.
Dashboarding and metrics experience (Excel, PowerBI, Splunk, etc.).
Experience maintaining multiple security tenants (GCCH and Commercial).
Relevant certifications: Microsoft Security Fundamentals, Azure Security Engineer Associate, CISSP, CIPT, etc.
Work Environment This position may require occasional after‑hours support and on‑call availability. The Operations Engineer will work in a collaborative team environment, contributing to the organization’s overall security and compliance posture.
What We Offer
Comprehensive compensation and benefits package with competitive base salary ranges.
Hybrid model: most external roles work in person 40–60% of the time.
Flexible vacation policy and paid time off options.
Equal Employment Opportunity & Accessibility EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity, pregnancy, genetic information, national origin, veteran status, or disability status. EY commits to providing reasonable accommodations for qualified individuals with disabilities.
#J-18808-Ljbffr
Location:
Anywhere in Country
Key Responsibilities
Platform Administration
Administer Microsoft Purview, Defender for Office, and eShare to ensure optimal performance and availability.
Configure and manage security settings, policies, and policy exceptions.
Follow change‑management lifecycle; test in DEV and QA before promotion to Production and document changes in ServiceNow.
User Support
Respond to incident tickets where security tools affect user tasks, ensuring tickets are resolved per SLAs.
Troubleshoot user issues, implement configuration changes if needed, and keep users informed of progress.
Escalate to client stakeholders as required.
Create and maintain user support documentation, including KB articles and SharePoint materials.
Collaboration & Communication
Work closely with IT, security, and email teams to integrate Purview, Defender, and eShare with existing systems.
Report operational status, escalations, blockers, and improvement recommendations to stakeholders.
Continuous Improvement
Monitor and report on data classification usage and DLP policy hits.
Stay updated on the latest features and best practices for the involved platforms.
Identify opportunities for process improvements and automation.
Automate repetitive activities using PowerShell, Python, Tines, PowerAutomate, etc.
Documentation & Reporting
Maintain accurate SOPs and configurations related to Purview, Defender, and eShare.
Generate performance and metrics reports for management review.
Maintain an updated project plan and communicate timelines to stakeholders.
Team Leadership
Collaborate with an international team across multiple time zones.
Assign and track tasks, provide updates, and offer technical support as an SMR.
Escalate issues and roadblocks to EY leadership as needed.
Qualifications
Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field.
3+ years of experience supporting Microsoft Purview and Defender for Office.
Strong problem‑solving, communication, and interpersonal skills.
Experience with PowerShell, Python, and automation tools (Tines, PowerAutomate, etc.).
Ticket and change‑management experience in ServiceNow.
Managed an international team across multiple time zones.
Preferred Skills
Knowledge of eShare technologies.
Dashboarding and metrics experience (Excel, PowerBI, Splunk, etc.).
Experience maintaining multiple security tenants (GCCH and Commercial).
Relevant certifications: Microsoft Security Fundamentals, Azure Security Engineer Associate, CISSP, CIPT, etc.
Work Environment This position may require occasional after‑hours support and on‑call availability. The Operations Engineer will work in a collaborative team environment, contributing to the organization’s overall security and compliance posture.
What We Offer
Comprehensive compensation and benefits package with competitive base salary ranges.
Hybrid model: most external roles work in person 40–60% of the time.
Flexible vacation policy and paid time off options.
Equal Employment Opportunity & Accessibility EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity, pregnancy, genetic information, national origin, veteran status, or disability status. EY commits to providing reasonable accommodations for qualified individuals with disabilities.
#J-18808-Ljbffr