Senior Enterprise Security Architect — Cloud & Zero Trust

EY; Portland (OR); Hybrid; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a Senior Consultant in Enterprise Security Architecture to assess current security architectures, design future-state frameworks, and align capabilities with enterprise strategy. You will deliver roadmaps, reference models, and governance constructs while mentoring junior team members.

Ideal candidates bring 3–5 years of experience, strong knowledge of SABSA/TOGAF/NIST, and hands-on cloud security across AWS/Azure/GCP, with the ability to engage executives and clients.

Qualifications

• Bachelor's degree in Cybersecurity, CS, Info Systems, Eng or related field with 3–5 years of experience
• Experience in enterprise security architecture assessments and future-state design
• Knowledge of NIST CSF/ISO 27001/27002/CIS/SABSA and architecture governance
• Travel willingness 25–50% for client engagements

Responsibilities

• Conduct security architecture assessments and design future-state architectures
• Develop actionable roadmaps aligning security with enterprise strategy
• Create architecture standards, policies, and governance frameworks
• Prepare client deliverables and executive-level presentations
• Collaborate with EY teams and mentor junior staff

Skills

Security architecture

Threat modelling

Risk analysis

Zero Trust principles

Cloud security (AWS/Azure/GCP)

SABSA/TOGAF/NIST frameworks

Communication to executives

Architecture documentation

Stakeholder collaboration

Education

Bachelor's degree in Cybersecurity/CS/Engineering

3–5 years of relevant experience

Graduate degree (optional)

Tools

PowerPoint

Excel

Word

Job description

EY is seeking a Senior Consultant in Enterprise Security Architecture to assess current security architectures, design future-state frameworks, and align capabilities with enterprise strategy. You will deliver roadmaps, reference models, and governance constructs while mentoring junior team members.

Ideal candidates bring 3–5 years of experience, strong knowledge of SABSA/TOGAF/NIST, and hands-on cloud security across AWS/Azure/GCP, with the ability to engage executives and clients.