Cloud Security Architect
Ernst and Young21 hours ago
Katowice, PolandMid Level
Responsibilities
- Design secure cloud architectures and enterprise-scale landing zones in Microsoft Azure or Amazon AWS.
- Lead and support migrations from on-premises environments to the cloud.
- Establish repository governance, branching strategies, pull request workflows, automated testing, release controls, and deployment approvals.
- Define Infrastructure as Code standards using Terraform, Bicep, or ARM.
- Create reusable templates, secure pipelines, and reference cloud architectures with engineering teams.
- Conduct architecture reviews, design reviews, threat modeling, security risk assessments, and remediation planning.
- Enforce cloud security baselines, benchmarks, policies, guardrails, and standards across critical infrastructure.
- Design and secure multi-subscription or multi-account cloud environments and manage custom cloud infrastructure lifecycles.
- Integrate security controls throughout the software development lifecycle and support audit, compliance, and regulatory requirements.
- Mentor engineers, establish technical standards, and drive cloud transformation, modernization, platform engineering, and shared-services initiatives.
- Collaborate with cloud, security, AI, data, quality engineering, compliance, product, and cyber leadership teams.
- Support security monitoring, incident response integration, and cloud security operations practices.
Requirements
- Bachelor’s degree in IT, Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a relevant discipline.
- At least 3 years of experience designing solutions in Microsoft Azure or Amazon AWS Cloud.
- Experience designing and implementing enterprise-scale Azure or AWS landing zones and multi-subscription or multi-account environments.
- Strong cloud security expertise covering Entra ID, RBAC, hardening, networking, encryption, secrets management, logging, and monitoring.
- Strong understanding of network segregation, private endpoints, firewalls, virtual networks, controlled egress, runtime isolation, and Zero Trust architecture.
- Experience with Terraform, ARM, or Bicep for infrastructure provisioning and cloud architecture enablement.
- Experience with Azure Policies, SCPs, OPA policies, containers, Kubernetes, Azure Container Apps, Azure Functions, or similar runtime platforms.
- Experience with Azure DevOps, GitHub Advanced Security, code scanning, secret scanning, dependency scanning, or policy-as-code.
- Experience with security architecture reviews, threat modeling, cloud security risk assessments, DevSecOps, governance, guardrails, and enterprise security baselines.
- Knowledge of NIST, CIS Benchmarks, ISO 27001, GDPR, secure software delivery, release controls, traceability, and audit-ready engineering practices.
- Ability to work hands-on with engineers while setting architecture direction and technical standards.
- Fluent or native English is required; C1 or CAE certification is preferred.
- Business- and personal-level AI proficiency with tools such as Copilot, Claude, and ChatGPT.
- Preferred experience includes project management or coordination, Microsoft Defender products, Microsoft Intune, Zscaler, CrowdStrike, Prisma Cloud, Wiz, sandboxed code execution, Python runtime environments, containerized workloads, isolated compute patterns, security for AI applications and APIs, Snowflake, and relevant Azure, AWS, GitHub, or Terraform certifications.
Benefits
- Hybrid work arrangement in Katowice with 2 days in the office and 3 days remote.
- Continuous learning opportunities and support for developing new skills.
- Tools and flexibility to make a meaningful impact and define success personally.
- Transformative leadership through coaching, insights, and career development.
- Diverse and inclusive global culture with collaboration across EY teams, locations, service lines, and sectors.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.