CyberSecurity Administrator - Infrastructure Management

EY · Taguig

Apply on the company website

The Opportunity

We are looking for an experienced administrator who will be responsible for the design, implementation, operation, optimization, and continuous improvement of enterprise technology solutions and services. The role ensures reliability, security, performance, compliance, and scalability while supporting business objectives and transformation initiatives. The engineer applies strong technical expertise, operational excellence, risk management, and architectural best practices to deliver resilient, efficient, and future-ready solutions across various technology domains.

Your Key Responsibilities include but not limited to:

• Perform hands-on administration, configuration, monitoring, maintenance, and troubleshooting of enterprise infrastructure and security technologies across client on-premises, hybrid, and cloud environments.
• Support infrastructure and security engagements involving technologies such as Windows/Linux, Active Directory, Microsoft Entra ID, Microsoft 365, Azure, AWS, endpoint security, network security, identity, vulnerability management, and security monitoring.
• Participate in client discovery sessions, technical workshops, requirement-gathering activities, and environment assessments to understand existing infrastructure, security controls, operational processes, and technical requirements.
• Assist senior consultants, engineers, and architects in assessing client environments and identifying security gaps, configuration issues, operational risks, and improvement opportunities.
• Support the design, implementation, configuration, testing, migration, and operational transition of infrastructure and security solutions.
• Perform technical assessments against defined security requirements, vendor recommendations, and industry practices such as NIST, CIS Controls/CIS Benchmarks, and ISO 27001.
• Implement and maintain security controls including system hardening, endpoint protection, identity and access controls, privileged access, MFA, vulnerability remediation, firewall/network controls, logging, and security monitoring.
• Support identity and access management activities involving Active Directory, Microsoft Entra ID, Conditional Access, MFA, RBAC, privileged accounts, access reviews, and hybrid identity.
• Support administration and security activities across Microsoft 365 workloads such as Exchange Online, Microsoft Defender, Microsoft Intune, Microsoft Purview, SharePoint, and Teams, depending on engagement requirements.
• Support network and network security activities involving TCP/IP, DNS, DHCP, VLANs, firewalls, VPNs, proxies/SSE technologies, segmentation, IDS/IPS, and related technologies.
• Assist with cloud infrastructure and security activities across Microsoft Azure, AWS, and/or Google Cloud Platform, including identity, compute, networking, logging, monitoring, and secure configuration.
• Perform infrastructure and security monitoring using SIEM, XDR, EDR, vulnerability management, ITSM, and infrastructure monitoring platforms.
• Support investigation and remediation of infrastructure and security incidents through log collection, technical analysis, troubleshooting, validation, and documentation.
• Execute vulnerability remediation, patching, configuration changes, system hardening, upgrades, and other approved technical changes following client change-management processes.
• Develop and maintain client-facing technical documentation including assessment results, configuration documents, implementation guides, test results, runbooks, standard operating procedures, technical diagrams, and knowledge-transfer materials.
• Document technical observations and findings and contribute to practical recommendations that consider security risk, business requirements, technical feasibility, and operational impact.
• Participate in solution testing, proof-of-concept activities, technical validation, and transition-to-operations activities.
• Perform knowledge-transfer activities with client infrastructure, security, and operations teams as required.
• Work collaboratively with client stakeholders, technology vendors, internal consultants, security architects, and infrastructure teams throughout engagement delivery.
• Assist in developing reusable consulting assets such as assessment checklists, implementation patterns, configuration standards, scripts, templates, and automation.
• Develop automation for repetitive administrative and security activities using PowerShell, Bash, Python, APIs, or equivalent technologies where appropriate.
• Maintain awareness of emerging infrastructure, cloud, and cybersecurity technologies and continuously develop technical capabilities relevant to consulting engagements.

Skills and attributes for success

• Good foundation in enterprise infrastructure administration and cybersecurity concepts.
• Hands-on knowledge in at least two infrastructure or security technology domains, with willingness to develop broader capabilities.
• Working knowledge of Windows Server and/or Linux administration, including configuration, permissions, services, patching, logging, and troubleshooting.
• Working knowledge of Active Directory and Microsoft Entra ID, including users, groups, authentication, access management, MFA, and RBAC.
• Understanding of networking fundamentals including TCP/IP, DNS, DHCP, VLANs, routing, firewalls, VPNs, proxies, and network troubleshooting.
• Familiarity with infrastructure and security technologies such as Microsoft Defender, Microsoft Sentinel, Microsoft Intune, Entra ID, CrowdStrike, Splunk, Tenable, Qualys, CyberArk, Palo Alto Networks, Fortinet, or Zscaler is advantageous.
• Ability to analyze technical information and translate findings into clear observations, risks, and practical recommendations.
• Ability to understand client requirements and work within different technology environments, security standards, and operating models.
• Ability to create clear technical documentation and client deliverables.
• Ability to communicate technical concepts effectively to client technical teams and internal stakeholders.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to manage assigned tasks and deliverables while working across multiple workstreams or engagements.
• Ability to work effectively under the guidance of Senior Consultants, Engineers, Managers, and Architects.
• Demonstrated willingness to learn new platforms and technologies based on client requirements.
• Customer-focused and professional approach when working with client stakeholders.
• Basic project delivery skills, including task management, status reporting, issue identification, documentation, and timely escalation.

General Requirements:

• Bachelor's Degree in Information Technology, Computer Science, Computer Engineering, Electronics Engineering, Cybersecurity, or related discipline, or equivalent relevant industry experience.
• 1 to 3 years of relevant professional experience in infrastructure administration, systems administration, cybersecurity, cloud, networking, security operations, technology consulting, or a related technical discipline.
• Practical experience or strong foundational knowledge in at least two of the following:

• Windows/Linux Administration
• Active Directory / Microsoft Entra ID
• Microsoft 365 Administration & Security
• Endpoint Management & Endpoint Security
• Network & Network Security
• Identity & Access Management
• Cloud Infrastructure & Cloud Security
• Vulnerability & Patch Management
• Security Monitoring / SIEM / XDR
• Infrastructure Automation

• Experience in Technology Consulting, Advisory, Professional Services, Managed Services, or client-facing technical delivery is preferred but not mandatory.
• Foundational knowledge of security concepts such as least privilege, defense in depth, Zero Trust, system hardening, secure configuration, vulnerability management, logging/monitoring, and incident response.
• Familiarity with NIST, CIS Controls/CIS Benchmarks, ISO 27001, or equivalent cybersecurity standards is advantageous.
• Basic scripting or automation experience using PowerShell, Bash, Python, APIs, or equivalent technologies is preferred.
• Relevant entry-to-intermediate certifications such as CompTIA Security+, Network+, CCNA, Microsoft Azure Administrator, Microsoft security certifications, AWS certifications, or equivalent are advantageous.

More jobs at EY · Security jobs in Taguig