TC-CS-AEET-Senior-ZT

EY; Bengaluru; Vor Ort; INR 2.500.000 - 4.500.000; Vollzeit

Zusammenfassung

EY is seeking a Senior Infra Security professional in India to shape Zero Trust architectures across on‑prem and cloud environments. You will design, implement and optimize security controls, including WAF, proxy and SDN protections, while guiding clients through SASE migrations and threat reduction strategies.

You’ll collaborate with senior stakeholders, coach junior team members, and contribute to a learning culture that advances security engineering capabilities and governance across EY’s

Qualifikationen

• 6+ years of IT experience with specialization in cyber security roles.
• Zero Trust Security Strategy and Implementation.
• Security Engineering & Architecture assessments.
• Possess understanding in firewalls, VPNs, NAC, SDWAN, WAF, Proxy, EDR/XDR.
• Experience with deployment, maintenance and operations of one or more major network security devices.
• Cloud Security Architecture.
• Entrepreneurial approach to solving security problems with consultative skills.
• Well versed with Zero Trust use cases, business & technical requirements.
• Experience in Zero Trust Security Architecture and Solution Design.
• Experience in Zero-Trust and micro-segmentation solutions including Guardicore and Illumio.

Aufgaben

• Design, build, test and implement security within an organisation’s IT infrastructure (On Prem & Cloud).
• Provide architectural guidance and governance to security initiatives across projects.
• Identify requirements, design documents and implement scalable and resilient network security solutions.
• Work with Zero Trust use cases and align with business and technical requirements.
• Lead planning, deployment and management of security controls including next-gen firewalls and SDN security.
• Deliver SASE transformations across platforms (Palo Alto, Netskope, Zscaler, Fortinet).
• Plan, deploy and manage WAF and proxy solutions (Zscaler).
• Segment networks, applications and data to limit exposure to threats.
• Develop automation aligned to client posture and threat landscape.
• Communicate security posture and risk in concise terms to stakeholders.

Kenntnisse

Zero Trust Security

Security Architecture

Network Security

Cloud Security

Firewall & VPN

WAF & Proxy

SASE Transformations

Threat & Risk Management

Security Engineering

Executive communication

Tools

Palo Alto

Checkpoint

Fortinet

Guardicore

Illumio

Netskope

Zscaler

NAC

DDOS Protection

SDWAN

Jobbeschreibung

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY- Cyber Security – Technology Consulting – Infrastructure Security – Zero Trust Security - Senior

As part of our EY Cyber Security team, you shall be responsible for defining, solutioning, integrating, and implementing innovative solutions which will enhance our service delivery quality, as well as help us strategically elevate technology driven transformation for our clients. You’ll also help to create a positive learning culture, coach and counsel junior team members and help them to develop.

The opportunity

We’re looking for an Infrastructure Security professional with solution mindset and hands on security engineering expertise in Zero Trust Security, risk and controls concepts, architecture design. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the rollout of next generation market relevant solutions.

Your key responsibilities

• A Security- Design & Architect professional who is responsible for designing, building, testing and implementing security within an organisation’s IT infrastructure- On Prem & Cloud.
• Professional is expected to have a thorough understanding of complex IT systems and stay up to date with the latest security standards, systems and authentication protocols, as well as best practice security products.
• Identify requirements, design document and implement technical solutions for scalable and resilient network architecture.
• Well versed with Zero Trust use cases , business & technical requirements.
• Experience in Zero Trust Security Architecture and Solution Design.
• Experience in Zero-Trust and micro-segmentation solutions including Guardicore and Illumio.
• Individual should possess experience in planning, design, deployment, configuration, integration and management of network protection controls including Next gen firewalls- Palo Alto, Checkpoint, Fortinet, SDN Security, DDoS Protection, IPS, VPN, Wireless security, NAC and network authentication solutions to protect IT assets and should be responsible for deployment of any changes, plug-ins, or configuration as requested by client.
• Proven expertise in designing and delivering SASE transformations across leading platforms such as Palo Alto, Netskope, Zscaler, and Fortinet, including strategy and assessment, vendor selection, PoC validation, architecture design, and enterprise-scale implementation.
• Plan, design, deploy, configure, integrate, and manage WAF, proxy/Zscaler solutions.
• Possess hands on experience in segmenting networks, applications, and data to limit exposure to attacks.
• Plan, design, deploy, configure, integrate and manage platform protection controls including virtualisation protection solutions on Hypervisors and thin client’s security solutions.
• Good understanding of security concepts and technologies including, but not limited to TCP/IP, LDAP, DHCP, DNS, web filtering etc.
• Should be well-versed with network documentation that includes network drawings, text descriptions and equipment configurations, designing HLDs and LLDs.

Skills and attributes for success

• Serve as highly technical security expert to bring security transformation to both new and legacy infrastructure.
• Deep technical understanding of architecture and solutioning of infrastructure security components.
• Deep knowledge of services and service delivery approach and methodology for infrastructure security including governance and operating models.
• Proven track record in building and maintaining trusted relationships with key internal and external stakeholders.
• Willingness to travel and flex work timings as and when required.
• Ability to change and adapt in a hyper-growth environment.
• Self-starter and strategic thinker.
• Drive C-suite/senior leadership level meetings and discussion.
• Excellent oral and written communication skills and executive presence that enable effective engagement with senior stakeholders.
• Ability to work independently and communicate the technical and security related issues to client/business stakeholders.
• Clearly demonstrates proven extensive abilities with leveraging creative thinking and problem-solving skills, individual initiative, and utilizing Office 365, MS Office (Word, Excel, Access, PowerPoint) and Google Docs.
• Communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information and communicating potential conflicts.
• Must communicate consistently and drive objectives, relying on fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.
• Good presentation, project management, facilitation and delivery skills as well as strong analytical and problem-solving capabilities.
• Ability to create domain specific training content and deliver training effectively.
• Develop/Implement automation solutions and capabilities that are clearly aligned to client business, technology and threat posture.
• Demonstrates ability to track developments and changes in the digital business and threat environments to ensure that they're adequately addressed in client’s security strategy plans and architecture artefacts.

To qualify for the role, you must have

• 6+ years of experience in Information Technology experience, with specialization in Cyber Security roles that include multiple areas of specialization. Professional-level knowledge in areas from the following:
  • Zero Trust Security Strategy and Implementation
  • Security Engineering & Architecture assessments
  • Possess understanding in firewalls, VPNs, NAC, SDWAN, WAF, Proxy, EDR/XDR etc.
  • Expert level experience with deployment, maintenance and operations of one or more major network security Devices
  • Cloud Security Architecture
  • Entrepreneurial approach to solving security problems with consultative skills
  • Well versed with Zero Trust use cases , business & technical requirements.
  • Experience in Zero Trust Security Architecture and Solution Design.
  • Experience in Zero-Trust and micro-segmentation solutions including Guardicore and Illumio.
  • Individual should possess experience in planning, design, deployment, configuration, integration and management of network protection controls including Next gen firewalls- Palo Alto, Checkpoint, Fortinet, SDN Security, DDoS Protection, IPS, VPN, Wireless security, NAC and network authentication solutions to protect IT assets and should be responsible for deployment of any changes, plug-ins, or configuration as requested by client.
  • Proven expertise in designing and delivering SASE transformations across leading platforms such as Palo Alto, Netskope, Zscaler, and Fortinet, including strategy and assessment, vendor selection, PoC validation, architecture design, and enterprise-scale implementation.
  • Plan, design, deploy, configure, integrate, and manage WAF, proxy/Zscaler solutions.

Ideally, you’ll also have

• Good soft skills i.e. verbal & written communication, technical document writing etc
• Strong project management, negotiation and interpersonal skills
• Prior experience working in Advisory or Technology Consulting industry
• Industry related certification (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, Zscaler)

What we look for

• A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
• An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide.
• Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries

What working at EY offers

At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.