EYEY - Cyber Security - Cloud Security Architect - Manager
About this role
The Opportunity
We’re looking for a Manager in our Cyber Security team with a strong focus on Cloud Security Architecture. In this role, you will be responsible for designing, governing, and assuring secure cloud and hybrid architectures, enabling organizations to adopt and scale cloud technologies securely across IaaS, PaaS, SaaS, and cloud native platforms.
You will work with global clients to define secure cloud landing zones, reference architectures, and security by design patterns, supporting large scale cloud transformation, modernization, and migration programs while addressing evolving cyber, regulatory, and business risks.
Your Key Responsibilities
- Design and define cloud security architectures for hybrid and multi cloud environments across Azure, AWS, and GCP.
- Develop secure cloud reference architectures and landing zone designs, incorporating identity, network segmentation, encryption, logging, monitoring, and governance controls.
- Lead cloud security architecture reviews and design assurance activities for client cloud programs.
- Apply Zero Trust Architecture principles across cloud, identity, network, and workload layers.
- Architect security controls for cloud native services, including containers, Kubernetes, serverless, and PaaS offerings.
- Oversee the integration of cloud native security services such as CSPM, CWPP, CIEM, CASB, and cloud native SIEM/SOAR.
- Conduct cloud threat modeling and risk assessments, addressing shared responsibility models and platform specific risks.
- Support secure adoption of DevSecOps practices, including infrastructure as code (IaC) and policy as code.
- Review and assess cloud configurations for compliance with organizational standards, regulatory requirements, and industry best practices.
- Collaborate with enterprise security architecture, data, privacy, and AI teams to ensure end to end security alignment.
- Engage senior client stakeholders to align cloud security strategy with business objectives and risk appetite.
- Mentor and guide junior consultants and architects, fostering strong cloud security capabilities.
- Contribute to solution development, go to market assets, RFPs, and proposals.
Skills and Attributes for Success
- Strong experience in cloud security architecture and design.
- Deep understanding of cloud shared responsibility models and defense in depth.
- Strong knowledge of identity centric security, network security, encryption, and key management in cloud environments.
- Experience securing cloud native workloads (containers, serverless, PaaS).
- Familiarity with CSPM, CWPP, CIEM, CASB, and cloud native security tooling.
- Strong understanding of Zero Trust Architecture in cloud contexts.
- Ability to translate complex cloud security risks into clear, actionable guidance.
- Excellent communication and stakeholder management skills.
- Ability to manage multiple engagements in a fast paced consulting environment.
To Qualify for the Role, You Must Have
- 10–14 years of experience in Information Technology, with specialization in Cloud and Cyber Security.
- Proven experience designing and reviewing cloud security architectures across Azure, AWS, and/or GCP.
- Hands on exposure to cloud IAM, network security, encryption, logging, and monitoring services.
- Experience implementing or integrating cloud security tooling (CSPM, CWPP, CIEM).
- Experience supporting cloud risk assessments, architecture reviews, and transformation programs.
- Relevant certifications such as CISSP, CCSP, Azure/AWS/GCP Security certifications, or equivalent.
Ideally, You’ll Also Have
- Experience working in a consulting or professional services environment.
- Exposure to multi cloud and hybrid cloud operating models.
- Familiarity with DevSecOps, IaC, and CI/CD security practices.
- Experience aligning cloud security with privacy, data protection, and regulatory requirements.
- Strong interpersonal skills and ability to build trusted client relationships.
- A proactive mindset toward emerging cloud security threats and innovations.
What We Look For
- Professionals with strong cloud architecture depth and consulting mindset.
- Ability to lead cloud security discussions with CISOs, CTOs, Cloud Architects, and senior stakeholders.
- Comfort working across technology, risk, and business teams.
- Experience supporting RFP responses, proposals, and solution shaping is a plus.
- Passion for enabling secure, scalable, and resilient cloud adoption.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
Apply now » Apply now- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.