Azure CNAPP Security Architect – DevSecOps Expert

EY; Honolulu (HI); Hybrid; USD 128,000 - 240,000; Full time

Job summary

EY Infosec is seeking a Cloud Security consultant to architect, configure and govern cloud security on the Microsoft Azure platform, with CNAPP expertise and experience integrating it into development, release, and operations.

This hands-on role leads Wiz CNAPP enablement across a broad set of Azure apps, supports IaC scanning in CI/CD, and collaborates with security, DevOps and product teams to reduce risk and improve compliance in a hybrid EY environment.

Qualifications

• Bachelor’s degree in Computer science, Information Security, or related field.
• 10+ years of experience working as a Cloud Security Engineer/Architect with Wiz (or similar CNAPP platforms and capabilities).
• Hands-on experience with Wiz capabilities at enterprise level including CSPM, CWPP, Vulnerability scanning, Compliance assessments, DevSecOps integration.
• CI/CD familiarity (GitHub/GitLab/Azure DevOps), IaC (Terraform/CloudFormation).
• Scripting/automation (Rego/Python/TypeScript), APIs/webhooks, event pipelines.
• Strong understanding of DevSecOps principles and practices.
• Excellent communication, presentation, and collaboration skills.
• Relevant security certifications such as CISSP or GIAC certs or Azure Security Engineer is a plus
• Frameworks: CIS Benchmarks, NIST 800‑53, 800‑190, ISO 27001/27002, SOC 2 and other industry standards
• Bonus: data classification (GDPR/CCPA), Container/Kubernetes security (EKS/AKS)

Responsibilities

• Mature Wiz CNAPP across the Azure cloud platform and enable risk-based remediation with DevOps teams.
• Drive the implementation of Wiz features and CNAPP capabilities within EY.
• Develop, tune, and enforce security policies for cloud environments and containers (Kubernetes).
• Collaborate to shift left (IaC scanning in CI/CD) and integrate security into the SDLC/CI/CD pipelines.
• Develop and implement security automation to monitor cloud environments for compliance, threats, and performance.
• Automate ingestion of security defects to Jira/ServiceNow.
• Conduct regular security assessments and threat modeling for cloud environments.
• Work with cross-functional teams to automate, monitor, and improve security at scale across cloud platforms.
• Collaborate with security ops and incident response teams to mitigate cloud-specific threats.
• Generate dashboards and executive metrics for security risk and compliance.

Skills

CNAPP platforms

Azure

DevSecOps

CI/CD

IaC

SAST

DAST

Kubernetes

IAM

Scripting

Education

Bachelor's degree

Tools

Wiz CNAPP

Job description

EY Infosec is seeking a Cloud Security consultant to architect, configure and govern cloud security on the Microsoft Azure platform, with CNAPP expertise and experience integrating it into development, release, and operations.

This hands-on role leads Wiz CNAPP enablement across a broad set of Azure apps, supports IaC scanning in CI/CD, and collaborates with security, DevOps and product teams to reduce risk and improve compliance in a hybrid EY environment.