Cloud Security Architect

EY; Katowice; Hybrid; PLN 240,000 - 360,000; Full time

Job summary

EY GDS Poland in Katowice is seeking a Cloud Security Architect to design secure cloud platforms and guide modern software delivery. You will lead security architecture across Azure and AWS, mentor engineers and drive governance across cloud environments.

Collaborate with engineering, security, data and compliance teams; define IaC standards (Terraform/Bicep/ARM); and support migrations from on‑premises to cloud, in a hybrid setup (2 days in office, 3 days remote).

Qualifications

• Experience designing and implementing enterprise‑scale cloud security solutions.
• Strong knowledge of cloud security controls, governance and compliance.
• Experience with IaC tooling (Terraform, ARM, Bicep) and secure pipelines.
• Fluent English (C1/CAE preferred).

Responsibilities

• Design secure cloud architectures in Microsoft Azure or Amazon AWS.
• Lead and support migrations from On-Premises to Cloud.
• Establish modern CI/CD practices with secure pipelines and governance.
• Define and maintain Infrastructure as Code standards using Terraform, Bicep or ARM.
• Partner with engineering teams to deliver reusable templates and reference architectures.
• Conduct architecture reviews, identify risks and recommend secure solutions.

Skills

Cloud security

Azure & AWS

CI/CD security practices

English fluency

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

Terraform

Azure DevOps

GitHub Advanced Security

Job description

Location: Katowice - 2 days office / 3 days remote

Cloud Security Architect

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

We are seeking an experienced Cloud Security Architect to help define and implement next generation of secure Cloud platforms, data-driven solutions, and enterprise digital services.
This role combines expertise in Cloud architecture and Cloud security. You will work closely with engineering, security, data, compliance, and product teams to establish secure architectural standards, reusable Cloud patterns, as well as modern software delivery practices that enable innovation while maintaining strong governance and compliance.
As a technical leader, you will define reference architectures, mentor engineering teams, and drive modernization initiatives across Cloud infrastructure, and software delivery platforms.

Your key responsibilities

• Design secure Cloud architectures in Microsoft Azure or Amazon AWS.
• Lead and support migration initiatives from On-Premises to Cloud.
• Establish modern CI/CD practices, including repository governance, branching strategies, pull request workflows, automated testing, release controls, and deployment approvals.
• Define and maintain Infrastructure as Code standards using Terraform, Bicep or ARM.
• Partner with engineering teams to deliver reusable templates, secure pipelines, and reference Cloud architecture.
• Conduct architecture and design reviews, identifying risks and recommending secure, scalable, and maintainable solutions.
• Collaborate with Cloud, security, AI, data, quality engineering, compliance, and product teams.
• Mentor engineers and contribute to the adoption of engineering best practices across cloud, security, DevOps, and infrastructure domains.
• Liaise with cyber leadership to review and implement security requirements across cloud platforms.
• Enforce security baselines, benchmarks, and standards across critical cloud infrastructure.
• Manage custom cloud infrastructure lifecycle.

Skills and attributes for success

• Bachelor’s Degree in IT / Computer Science / Computer Engineering / Cybersecurity / Information Systems or relevant discipline.
• At least 3 years of experience in design of solutions in Microsoft Azure or Amazon AWS Cloud.
• Strong Cloud security expertise, including EntraID, RBAC, hardening, networking, encryption, secrets management, logging and monitoring.
• Strong knowledge of network segregation, private endpoints, firewalls, virtual networks, controlled egress, and runtime isolation.
• Experience with Terraform, ARM or Bicep for infrastructure provisioning and Cloud architecture enablement.
• Experience with Azure Policies, SCPs, OPA policies
• Experience with containers, Kubernetes, Azure Container Apps, Azure Functions, or similar runtime platforms.
• Experience with Azure DevOps, GitHub Advanced Security, code scanning, secret scanning, dependency scanning, or policy-as-code.
• Understanding of secure software delivery, release controls, traceability, and audit-ready engineering practices.
• Ability to work hands-on with engineers while also setting architecture direction and technical standards.
• Fluent or native English required – C1 / CAE certification preferred
• AI proficiency at business and personal level (Copilot, Claude, ChatGPT)

To qualify for the role, you must have

• Experience designing and implementing enterprise-scale Landing Zones in Azure or AWS environments.
• Strong understanding of Zero Trust architecture principles.
• Experience performing security architecture reviews, threat modeling, and cloud security risk assessments.
• Strong knowledge of cybersecurity frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, and GDPR.
• Experience implementing DevSecOps practices and integrating security controls throughout the software development lifecycle.
• Experience designing and securing multi-subscription or multi-account Cloud environments.
• Knowledge of cloud governance, guardrails, and security baseline implementation at enterprise scale.
• Experience with Cloud Landing Zone automation, platform engineering, and shared services architecture.
• Experience supporting audit, compliance, and regulatory requirements within Cloud environments.
• Demonstrated ability to drive Cloud transformation and modernization programs within large enterprise environments.
• Experience with security monitoring, incident response integration, and Cloud security operations practices.

Ideally, you’ll also have

• Experience in Project Management or project coordination
• Experience in Microsoft Defender for Cloud, Microsoft Defender for CloudApps, Microsoft Defender for Endpoint or Microsoft Intune
• Experience in Zscaler, Crowdstrike, PrismaCloud or Wiz is a big plus
• Experience with sandboxed code execution, Python runtime environments, containerized workloads, or isolated compute patterns.
• Experience in designing security for AI applications, AI agents, APIs, data-consuming applications, or internal developer platforms.
• Experience in Snowflake
• Relevant certifications such as:
  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft Certified: Azure Security Engineer Associate
  • Microsoft Certified: DevOps Engineer Expert
  • AWS Certified Solutions Architect - Associate i
  • GitHub Actions or GitHub Advanced Security certification
  • HashiCorp Terraform certification

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

In compliance with the requirements of the Whistleblower Protection Act, our company has established theProcedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be repo rted through the EY Ethics Hotline.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.