Azure CNAPP Security Architect – Wiz & DevSecOps

EY; Salt Lake City (UT); Hybrid; USD 128,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY Infosec is seeking a Cloud Security consultant to architect, configure, and govern cloud security across Microsoft Azure with CNAPP expertise. You will guide and implement secure deployments, lead CNAPP enablement, and mitigate risks for EY’s Azure-based applications, with familiarity across GCP/AWS.

The role operates in a DevSecOps model, requiring collaboration with product owners, architects, developers and security teams to certify security controls across multiple projects.

Qualifications

• Bachelor’s degree in Computer science, Information Security, or related field.
• 10+ years of experience as a Cloud Security Engineer/Architect with CNAPP platforms.
• Hands-on Wiz CNAPP capabilities at Enterprise level (CSPM, CWPP, vulnerability scanning, compliance).
• CI/CD familiarity; IaC (Terraform/CloudFormation).
• Scripting/automation (Rego/Python/TypeScript); APIs/webhooks; event pipelines.
• Strong DevSecOps principles and practices; excellent communication and collaboration.

Responsibilities

• Mature our cloud security posture using Wiz CNAPP across Azure.
• Drive CNAPP feature implementation and build capabilities within EY.
• Develop, tune, and enforce security policies for cloud and container workloads (Kubernetes).
• Integrate security into SDLC and CI/CD pipelines; shift left in IaC scanning.
• Develop and implement security automation to monitor cloud environments for compliance and threats.
• Automate ingestion of security defects to Jira/ServiceNow.
• Conduct regular security assessments, vulnerability scans and threat modeling.
• Collaborate with cross-functional teams to automate, monitor and scale security across cloud platforms.
• Work with Security Ops and Incident response to investigate and remediate incidents.

Skills

Cloud security

DevSecOps

CNAPP/Wiz

CI/CD

Scripting/Automation

Education

Bachelor’s degree in Computer science or Information Security

Tools

Wiz CNAPP

Terraform/CloudFormation

Kubernetes

GitHub/GitLab/Azure DevOps

SAST/DAST tools

Job description

EY Infosec is seeking a Cloud Security consultant to architect, configure, and govern cloud security across Microsoft Azure with CNAPP expertise. You will guide and implement secure deployments, lead CNAPP enablement, and mitigate risks for EY’s Azure-based applications, with familiarity across GCP/AWS.

The role operates in a DevSecOps model, requiring collaboration with product owners, architects, developers and security teams to certify security controls across multiple projects.