Hybrid Cloud Security Architect – Enterprise & DevSecOps

JobSpace; Auckland; Hybrid; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work policies

Wellness incentive

Up to 8 weeks flex leave per year

Gender-neutral parental leave

Job summary

EY in Auckland is seeking a Cloud Security Consultant to assess cloud security risks, strengthen controls and enable secure delivery of technology transformation programs. You will work with clients across Azure, AWS and GCP to shape secure architectures and DevSecOps practices.

This hybrid role in Tāmaki Makaurau offers collaboration with Solution Architects and governance forums, focusing on IAM, PAM and cloud governance while deepening expertise in security architecture and enterprise

Qualifications

• Cloud security experience across enterprise environments.
• Strong understanding of cloud security principles (Azure + AWS/GCP).
• Experience reviewing cloud security configurations and controls.
• Familiarity with cloud security tooling (Defender for Cloud, Security Hub, SCC, Prisma Cloud).
• IAM and PAM experience with Azure AD/CID and privileged access controls.
• Knowledge of security architectures, encryption, key management, and network security.

Responsibilities

• Partner with business and project teams to assess solutions and ensure alignment with security standards and regulatory requirements.
• Perform cloud security assessments, architecture reviews and configuration reviews across Azure, AWS and GCP.
• Assess cloud-native security controls across IAM, networking, encryption, logging and data protection.
• Review SADs to identify risks, gaps and improvement opportunities.
• Conduct threat modelling using STRIDE and support secure-by-design outcomes.
• Support IaC security reviews (Terraform, Bicep) and cloud governance.
• Support CI/CD integration of security controls and DevSecOps practices.
• Conduct third-party security assessments (vendor, SaaS, technology risk).
• Collaborate across IAM, PAM, Vulnerability Management, Cloud Security and GRC functions.

Skills

Cloud security assessments

Azure security

AWS or GCP security

IAM/PAM security

DevSecOps

Threat modelling

IaC security (Terraform/Bicep)

Security governance

Security reporting

Kubernetes security (desirable)

Tools

Defender for Cloud

AWS Security Hub

Security Command Center

Prisma Cloud

Terraform

Bicep

SAST

SCA

Job description

EY in Auckland is seeking a Cloud Security Consultant to assess cloud security risks, strengthen controls and enable secure delivery of technology transformation programs. You will work with clients across Azure, AWS and GCP to shape secure architectures and DevSecOps practices.

This hybrid role in Tāmaki Makaurau offers collaboration with Solution Architects and governance forums, focusing on IAM, PAM and cloud governance while deepening expertise in security architecture and enterprise