GMS Senior Zero Trust Plus Cloud Plus FW

At EY youll have the chance to build a career as unique as you are with the global scale support inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better too. Join us and build an exceptional experience for yourself and a better working world for all.

ZTCloudFWCloud SecuritySenior

Key Responsibilities:

• Design implement and manage cloud security architectures grounded in Zero Trust principles.
• Configure and oversee cloud-based and next-generation firewalls (NGFW) across hybrid and multi-cloud environments.
• Implement Zero Trust Network Access (ZTNA) solutions to ensure secure user-to-application access.
• Manage and optimize network security controls including firewall rules security policies and traffic segmentation.
• Secure cloud workloads and applications within AWS Azure and/or GCP environments.
• Implement identity-aware security controls by integrating Identity and Access Management (IAM) Multi-Factor Authentication (MFA) and conditional access.
• Monitor analyze and respond to security events and incidents across both cloud and network layers.
• Conduct risk assessments manage vulnerabilities and perform remediation activities.
• Support secure connectivity for on-premises cloud and remote users.
• Assist in transitioning from traditional perimeter-based security to a Zero Trust architecture.
• Collaborate closely with DevOps and platform teams to implement security controls within CI/CD pipelines.
• Maintain security documentation standards and operational runbooks.
• Support compliance and audit requirements for standards such as ISO SOC 2 PCI DSS and HIPAA.
• Stay updated on cloud security trends emerging threats and best practices.

Preferred Requirements:

• Over 3 years of experience in Cloud Security Network Security or Infrastructure Security.
• Strong understanding and hands-on experience with Zero Trust Architecture and ZTNA solutions.
• Experience with firewall technologies including Palo Alto Fortinet Check Point Cisco or cloud-native firewalls.
• Practical experience with public cloud platforms such as AWS Azure and GCP.
• Knowledge of cloud-native security services including:
  • AWS Security Groups NACLs and Network Firewall
  • Azure Firewall and Network Security Groups (NSGs)
  • GCP Firewall Rules
• Strong foundational knowledge of networking concepts including TCP/IP DNS routing and VPNs.
• Experience integrating identity providers (e.g. Azure AD/Entra ID Okta) with security controls.
• Familiarity with Secure Access Service Edge (SASE) concepts.
• Experience with Security Information and Event Management (SIEM) or Security Orchestration Automation and Response (SOAR) tools and log analysis.
• Exposure to Infrastructure as Code (IaC) and automation tools (e.g. Terraform ARM CloudFormation).
• Understanding of encryption SSL/TLS and certificate management.
• Knowledge of regulatory and compliance standards.

Relevant Certifications Preferred:

• AZ-500 / AWS Security Specialty
• CCNP Security
• CISSP / CCSP (preferred but not required)
• Strong troubleshooting analytical and communication skills.
• Ability to thrive in a fast-paced cloud-first security environment.

EY Building a better working world

EY exists to build a better working world helping to create long-term value for clients people and society and build trust in the capital markets.

Enabled by data and technology diverse EY teams in over 150 countries provide trust through assurance and help clients grow transform and operate.

Working across assurance consulting law strategy tax and transactions EY teams ask better questions to find new answers for the complex issues facing our world today.