Azure Cloud Security Architect — CNAPP & DevSecOps

EY; City of Albany (NY); Hybrid; USD 128,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension/401(k)

Job summary

EY Infosec seeks a Cloud Security consultant with Azure CNAPP expertise to guide, implement and maintain security for EY’s cloud services. You will lead Wiz CNAPP enablement, automate guardrails, and work with DevOps to reduce risk across multiple applications hosted in Azure.

The role requires hands-on CNAPP experience, strong scripting and automation, and collaboration with security architects, developers, and product teams. A hybrid work model is offered within a global EY framework.

Qualifications

• 10+ years of experience as a Cloud Security Engineer/Architect with Wiz or similar CNAPP platforms.
• Hands-on experience with Wiz CNAPP capabilities at enterprise level including CSPM, CWPP, vulnerability scanning, compliance assessments, DevSecOps integration.
• CI/CD familiarity with GitHub, GitLab, Azure DevOps; IaC: Terraform, CloudFormation.
• Scripting/automation using Rego, Python, TypeScript; APIs/webhooks; event pipelines.
• Strong DevSecOps understanding; excellent communication, presentation, and collaboration skills.
• Security certifications such as CISSP or GIAC or Azure Security Engineer are a plus.
• Frameworks: CIS Benchmarks, NIST 800-53/800-190, ISO 27001/27002, SOC 2; GDPR/CCPA data classification; Container/Kubernetes security (EKS/AKS) bonus.

Responsibilities

• Mature and advance cloud security posture using Wiz CNAPP across Azure.
• Guide and help integrate Wiz to drive risk-based remediation with product/DevOps teams.
• Develop, tune, enforce security policies for cloud and container workloads including Kubernetes.
• Shift left via IaC scanning in CI/CD; approve/deny policies in SDLC and CI/CD pipelines.
• Develop and implement security automation for continuous compliance, threats, and performance anomalies.
• Automate ingestion of security defects to Jira/ServiceNow.
• Conduct regular security assessments, vulnerability scans, and threat modeling for cloud infra.
• Collaborate with security architects, engineers, developers and product owners to automate and improve security at scale across clouds.
• Work with SecOps and IR teams to investigate and remediate incidents; address cloud-specific attack vectors.
• Generate dashboards and executive metrics; report risks and incidents to leadership.

Education

Bachelor’s degree in Computer science, Information Security, or related field

Tools

GitHub

GitLab

Azure DevOps

Terraform

CloudFormation

Job description

EY Infosec seeks a Cloud Security consultant with Azure CNAPP expertise to guide, implement and maintain security for EY’s cloud services. You will lead Wiz CNAPP enablement, automate guardrails, and work with DevOps to reduce risk across multiple applications hosted in Azure.

The role requires hands-on CNAPP experience, strong scripting and automation, and collaboration with security architects, developers, and product teams. A hybrid work model is offered within a global EY framework.