DE-Azure Cloud Network and Security SM-GDSN02

Career Family : Azure Network and Security Architect

The opportunity

We are the only professional services organization who has a separate business dedicated exclusively to the financial services marketplace. Join Digital Engineering Team and you will work with multi-disciplinary teams from around the world to deliver a global perspective. Aligned to key industry groups including Asset management Banking and Capital Markets Insurance and Private Equity Health Government Power and Utilities we provide integrated advisory assurance tax and transaction services. Through diverse experiences world-class learning and individually tailored coaching you will experience ongoing professional development. Thats how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders and in so doing play a critical role in building a better working world for our people for our clients and for our communities. Sound interesting Well this is just the beginning. Because whenever you join however long you stay the exceptional EY experience lasts a lifetime.

We are seeking a Senior Manager Identity Security & Networking at EY GDS. This role focuses on enterprise cloud security architecture identity centric security models hybrid Active Directory modernization and secure networking with strong leadership and client advisory responsibility.

EY Digital Engineering is a unique industry-focused business unit that provides a broad range of integrated services that leverage deep industry experience with strong functional capability and product knowledge. The Digital Engineering practice works with clients to analyse formulate design mobilize and drive digital transformation initiatives. We advise clients on their most pressing digital challenges and opportunities surround business strategy customer growth profit optimization innovation technology strategy and digital transformation. We also have a unique ability to help our clients translate strategy into actionable technical design and transformation planning/mobilization. Through our unique combination of competencies and solutions EYs DE team helps our clients sustain competitive advantage and profitability by developing strategies to stay ahead of the rapid pace of change and disruption and supporting the execution of complex transformations.

Your key responsibilities

• Define and govern enterprise wide security architectures aligned with Zero Trust principles and regulatory requirements.
• Act as a trusted advisor to clients on cloud security strategy identity centric security models and risk mitigation.
• Lead security architecture design across Azure and hybrid environments ensuring confidentiality integrity and availability.
• Establish architectural standards for identity access network security and workload protection.
• Lead design and modernization of Microsoft Entra ID (Azure AD) and hybrid Active Directory architectures.
• Define identity governance authentication authorization and conditional access strategies.
• Drive implementation of SSO MFA RBAC Privileged Identity Management (PIM) and identity lifecycle management.
• Oversee AD modernization initiatives including domain consolidation hybrid identity and cloud only identity strategies.
• Ensure integration with enterprise applications SaaS platforms and hybrid/cloud workloads.
• Define and govern secure enterprise networking architectures across cloud on prem and hybrid environments.
• Drive adoption of Azure networking services including VNet design NSGs Application Gateway Azure Firewall Load Balancer VPN Gateway ExpressRoute and private endpoints.
• Architect secure connectivity patterns between cloud platforms data centres SaaS providers and partner ecosystems.
• Promote network segmentation secure ingress/egress and resilient network design.
• Define security governance frameworks covering policies standards controls and operational processes.
• Oversee implementation of security monitoring logging and threat detection using Microsoft Defender Sentinel and native security tooling.
• Ensure compliance with industry regulations and enterprise risk frameworks particularly in regulated industries (FS public sector).
• Guide clients on incident readiness audit preparation and continuous security improvement.
• Provide security and network architecture leadership across large scale cloud and platform transformation programs.
• Partner with cloud data integration and application teams to ensure security is embedded by design.
• Review and assure solution designs mitigating risks while enabling business agility.
• Lead mentor and develop security identity and networking architects/engineers.
• Serve as a senior security advisor to executive stakeholders and client leadership teams.
• Contribute to pre sales solutioning proposals and thought leadership in cloud security and identity.
• Drive internal capability development reusable security patterns accelerators and best practices.
• Stay current with emerging security threats identity innovations and cloud networking trends.

Skills and attributes for success

• Deep understanding of cloud security architecture and identity driven security models.
• Strong expertise in Microsoft Entra ID (Azure AD) Active Directory hybrid identity and access governance.
• Experience with conditional access MFA RBAC PIM identity federation and directory synchronization.
• Strong knowledge of networking fundamentals including routing DNS firewalls VPNs and network protocols.
• Hands on experience designing secure Azure networking architectures ExpressRoute VPN and private access models.
• Experience implementing network segmentation and Zero Trust networking patterns.
• Familiarity with Microsoft Defender Azure security services logging monitoring and SIEM/SOAR concepts.
• Understanding of security posture management vulnerability management and threat modeling.
• Proven ability to lead complex security and cloud programs in enterprise environments.
• Strong stakeholder management and communication skills with technical and executive audiences.
• Analytical and problem solving mindset with ability to balance risk and business enablement.
• Passion for continuous learning and developing high performing security teams.

Preferred Qualifications:

• Microsoft Certified: Identity and Access Administrator / Azure Security Engineer / Security Solutions Architect (preferred).
• 810 years experience in security architecture identity or enterprise networking roles.
• Experience operating in regulated security sensitive environments.
• Familiarity with Zero Trust defence in depth and compliance frameworks.
• Problem-Solving: Strong analytical skills with the ability to troubleshoot and resolve complex issues.
• Agile Methodologies: Familiarity with Agile development practices and methodologies.

Education:

• Degree: Bachelors degree in computer science Engineering Information Technology or a related field or equivalent practical experience

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations Argentina China India the Philippines Poland and the UK and with teams from all EY service lines geographies and sectors playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants we offer a wide variety of fulfilling career opportunities that span all business GDS you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. Well introduce you to an ever-expanding ecosystem of people learning skills and insights that will stay with you throughout your career.

• Continuous learning: Youll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: Well provide the tools and flexibility so you can make a meaningful impact your way.
• Transformative leadership: Well give you the insights coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: Youll be embraced for who you are and empowered to use your voice to help others find theirs.