Azure CNAPP Security Architect — Cloud DevSecOps

EY; Topeka (KS); Hybrid; USD 128,000 - 240,000; Full time

Job summary

EY Infosec seeks a Cloud Security consultant with CNAPP expertise to lead cloud security architecture, governance, and deployment across Microsoft Azure. The role involves hands-on implementation, automated testing, and risk reduction, with familiarity of GCP/AWS.

You will work in a DevSecOps model to enable secure deployments and guardrails for EY’s applications in Azure. The position focuses on delivering CNAPP enablement, security controls, and collaboration with product teams, architects,

Qualifications

• Bachelor’s degree in Computer science, Information Security, or related field
• 10+years of experience working as a Cloud Security Engineer/Architect with Wiz (or similar CNAPP platforms and capabilities)
• Hands‑on experience with Wiz (or similar CNAPP) capabilities at Enterprise level including – CSPM, CWPP, Vulnerability scanning, Compliance assessments, DevSecOps integration
• CI/CD familiarity (GitHub/GitLab/Azure DevOps), IaC (Terraform/CloudFormation)
• Scripting/automation (Rego/Python/TypeScript), APIs/webhooks, event pipelines
• Strong understanding of DevSecOps principles and practices.
• Must possess excellent communication, presentation, and collaboration skills.
• Relevant security certifications such as CISSP or GIAC certs or Azure Security Engineer is a plus
• Frameworks: CIS Benchmarks, NIST 800-53, 800-190, ISO 27001/27002, SOC 2 and other industry standards
• Bonus: data classification (GDPR/CCPA), Container/Kubernetes security (EKS/AKS)

Responsibilities

• SME to mature/advance our cloud security posture using Wiz CNAPP across the Azure cloud platform.
• Drive the implementation of Wiz CNAPP features and build CNAPP capabilities within EY.
• Develop, tune, and enforce security policies, requirements, standards, and procedures for cloud environments and container workloads.
• Collaborate with cross-functional teams to shift left (IaC scanning in CI/CD) and integrate security best practices into the SDLC/CI-CD pipelines.
• Develop and implement security automation to monitor cloud environments for compliance, threats, and performance anomalies.
• Automate ingestion of security defects to Jira/ServiceNow
• Conduct regular security assessments, vulnerability scans, and threat modeling for cloud environments.
• Work with security architects, engineers, developers and product owners to automate, monitor, and improve security at scale.
• Support incident response teams with cloud-specific attack vectors and mitigation strategies.
• Generate dashboards and executive metrics for risk reduction, SLA adherence, and coverage.
• Collaborate with stakeholders to define project scope, deliverables, and expectations.
• Identify gaps in security tools and, when needed, create custom security solutions.

Skills

Cloud security

CNAPP experience

DevSecOps

Security policies & compliance

Vulnerability management

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Wiz CNAPP

CSPM

CWPP

Terraform

CloudFormation

GitHub/GitLab/Azure DevOps

SAST/DAST tools

IAM

Kubernetes

Job description

EY Infosec seeks a Cloud Security consultant with CNAPP expertise to lead cloud security architecture, governance, and deployment across Microsoft Azure. The role involves hands-on implementation, automated testing, and risk reduction, with familiarity of GCP/AWS.

You will work in a DevSecOps model to enable secure deployments and guardrails for EY’s applications in Azure. The position focuses on delivering CNAPP enablement, security controls, and collaboration with product teams, architects,