Senior Cloud Security Engineer (Zero Trust & Firewall)

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

ZT+Cloud+FW_Cloud Security_Senior

Key Responsibilities:

• Design, implement, and manage cloud security architectures grounded in Zero Trust principles.
• Configure and oversee cloud-based and next-generation firewalls (NGFW) across hybrid and multi-cloud environments.
• Implement Zero Trust Network Access (ZTNA) solutions to ensure secure user-to-application access.
• Manage and optimize network security controls, including firewall rules, security policies, and traffic segmentation.
• Secure cloud workloads and applications within AWS, Azure, and/or GCP environments.
• Implement identity-aware security controls by integrating Identity and Access Management (IAM), Multi-Factor Authentication (MFA), and conditional access.
• Monitor, analyze, and respond to security events and incidents across both cloud and network layers.
• Conduct risk assessments, manage vulnerabilities, and perform remediation activities.
• Support secure connectivity for on-premises, cloud, and remote users.
• Assist in transitioning from traditional perimeter-based security to a Zero Trust architecture.
• Collaborate closely with DevOps and platform teams to implement security controls within CI/CD pipelines.
• Maintain security documentation, standards, and operational runbooks.
• Support compliance and audit requirements for standards such as ISO, SOC 2, PCI DSS, and HIPAA.
• Stay updated on cloud security trends, emerging threats, and best practices.

Preferred Requirements:

• Over 3 years of experience in Cloud Security, Network Security, or Infrastructure Security.
• Strong understanding and hands-on experience with Zero Trust Architecture and ZTNA solutions.
• Experience with firewall technologies, including Palo Alto, Fortinet, Check Point, Cisco, or cloud-native firewalls.
• Practical experience with public cloud platforms such as AWS, Azure, and GCP.
• Knowledge of cloud-native security services, including:
  • AWS Security Groups, NACLs, and Network Firewall
  • Azure Firewall and Network Security Groups (NSGs)
  • GCP Firewall Rules
• Strong foundational knowledge of networking concepts, including TCP/IP, DNS, routing, and VPNs.
• Experience integrating identity providers (e.g., Azure AD/Entra ID, Okta) with security controls.
• Familiarity with Secure Access Service Edge (SASE) concepts.
• Experience with Security Information and Event Management (SIEM) or Security Orchestration, Automation, and Response (SOAR) tools and log analysis.
• Exposure to Infrastructure as Code (IaC) and automation tools (e.g., Terraform, ARM, CloudFormation).
• Understanding of encryption, SSL/TLS, and certificate management.
• Knowledge of regulatory and compliance standards.

Relevant Certifications Preferred:

• AZ-500 / AWS Security Specialty
• CCNP Security
• CISSP / CCSP (preferred but not required)
• Strong troubleshooting, analytical, and communication skills.
• Ability to thrive in a fast-paced, cloud-first security environment.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.