TC-CS-Cyber Architecture- OT and Engineering-Devops- Cloud Security-Senior
About this role
Key responsibilities include:
- Developing and maintaining secure VM images through automation and scripting.
- Implementing CI/CD pipelines for efficient deployment and management of images.
- Design and implement end to end automation workflows for image creation, validation, testing, and deployment.
- Create and maintain detailed documentation (runbooks, hardening guides, architecture diagrams).
- Conducting OS hardening for various operating systems, including RHEL, Rocky, OEL, Amazon Linux, Ubuntu, and Windows (2016/2019/2022). Debugging code and troubleshooting pipeline errors, OS issues, and service deployments.
- Build and manage automated patching mechanisms for Linux and Windows images.
- Applying in-depth knowledge of CIS L1/L2 frameworks to identify and remediate vulnerabilities using automated mechanisms.
- Track updates in CIS benchmarks and ensure continuous alignment with best practices.
- Support audits and compliance reviews by providing evidence, reports, and remediation strategies.
- Enhance pipelines with security validation, including vulnerability scanning, compliance checks, and integrity verification.
- Conduct peer reviews for scripts, automation logic, and IaC templates to ensure quality and consistency.
- Collaborate with cloud infrastructure, architecture, and security teams to align hardened images with enterprise requirements.
- Providing excellent customer service by communicating effectively with clients about team initiatives and project progress.
- The successful candidate will possess strong problem-solving skills, a proactive approach to security challenges, and the ability to work collaboratively in a fast-paced environment.
- A commitment to continuous learning and staying updated on the latest security trends and technologies is highly valued.
Required:
- Minimum of 5 years of IT experience
- At least 3+ years of specialization in Image hardening.
- At least 2+ years of application development in python.
- At least 2+ Experience with programming languages such as Terraform.
- 3-5 years of experience in managing and securing multi-cloud environments (AWS, Azure, GCP) with native security tools.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
Apply now » Apply now- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function:- "route" is used for session stickiness
- "careerSiteCompanyId" is used to send the request to the correct data center
- "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
- "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another