{"id":3284195,"url":"https://alion.io/job/ey-cloud-security-architect","title":"Cloud Security Architect","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Katowice, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":122000,"period":"year","method":"role_seniority_country_cell","sample_n":14},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"ChatGPT","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wiz","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"AI Agents","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Python","optional":true},{"name":"Snowflake","optional":true}],"status":"live","first_seen_at":"2026-10-26T17:45:50Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-30T21:34:46Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Location: Katowice - 2 days office / 3 days remote\nCloud Security Architect\nLet us introduce you the job offer by EY GDS Poland - a member of the global integrated service delivery center network by EY.\nThe opportunity\nWe are seeking an experienced Cloud Security Architect to help define and implement next generation of secure Cloud platforms, data-driven solutions, and enterprise digital services.\nThis role combines expertise in Cloud architecture and Cloud security. You will work closely with engineering, security, data, compliance, and product teams to establish secure architectural standards, reusable Cloud patterns, as well as modern software delivery practices that enable innovation while maintaining strong governance and compliance.\nAs a technical leader, you will define reference architectures, mentor engineering teams, and drive modernization initiatives across Cloud infrastructure, and software delivery platforms.\nYour key responsibilities\nDesign secure Cloud architectures in Microsoft Azure or Amazon AWS. \nLead and support migration initiatives from On-Premises to Cloud.\nEstablish modern CI/CD practices, including repository governance, branching strategies, pull request workflows, automated testing, release controls, and deployment approvals.\nDefine and maintain Infrastructure as Code standards using Terraform, Bicep or ARM.\nPartner with engineering teams to deliver reusable templates, secure pipelines, and reference Cloud architecture.\nConduct architecture and design reviews, identifying risks and recommending secure, scalable, and maintainable solutions.\nCollaborate with Cloud, security, AI, data, quality engineering, compliance, and product teams.\nMentor engineers and contribute to the adoption of engineering best practices across cloud, security, DevOps, and infrastructure domains.\nLiaise with cyber leadership to review and implement security requirements across cloud platforms.\nEnforce security baselines, benchmarks, and standards across critical cloud infrastructure.\nManage custom cloud infrastructure lifecycle.\nSkills and attributes for success\nBachelor’s Degree in IT / Computer Science / Computer Engineering / Cybersecurity / Information Systems or relevant discipline.\nAt least 3 years of experience in design of solutions in Microsoft Azure or Amazon AWS Cloud.\nStrong Cloud security expertise, including EntraID, RBAC, hardening, networking, encryption, secrets management, logging and monitoring.\nStrong knowledge of network segregation, private endpoints, firewalls, virtual networks, controlled egress, and runtime isolation.\nExperience with Terraform, ARM or Bicep for infrastructure provisioning and Cloud architecture enablement.\nExperience with Azure Policies, SCPs, OPA policies\nExperience with containers, Kubernetes, Azure Container Apps, Azure Functions, or similar runtime platforms.\nExperience with Azure DevOps, GitHub Advanced Security, code scanning, secret scanning, dependency scanning, or policy-as-code.\nUnderstanding of secure software delivery, release controls, traceability, and audit-ready engineering practices.\nAbility to work hands-on with engineers while also setting architecture direction and technical standards.\nFluent or native English required - C1 / CAE certification preferred\nAI proficiency at business and personal level (Copilot, Claude, ChatGPT)\nTo qualify for the role, you must have\nExperience designing and implementing enterprise-scale Landing Zones in Azure or AWS environments.\nStrong understanding of Zero Trust architecture principles.\nExperience performing security architecture reviews, threat modeling, and cloud security risk assessments.\nStrong knowledge of cybersecurity frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, and GDPR.\nExperience implementing DevSecOps practices and integrating security controls throughout the software development lifecycle.\nExperience designing and securing multi-subscription or multi-account Cloud environments.\nKnowledge of cloud governance, guardrails, and security baseline implementation at enterprise scale.\nExperience with Cloud Landing Zone automation, platform engineering, and shared services architecture.\nExperience supporting audit, compliance, and regulatory requirements within Cloud environments.\nDemonstrated ability to drive Cloud transformation and modernization programs within large enterprise environments.\nExperience with security monitoring, incident response integration, and Cloud security operations practices.\nIdeally, you’ll also have\nExperience in Project Management or project coordination\nExperience in Microsoft Defender for Cloud, Microsoft Defender for CloudApps, Microsoft Defender for Endpoint or Microsoft Intune\nExperience in Zscaler, Crowdstrike, PrismaCloud or Wiz is a big plus\nExperience with sandboxed code execution, Python runtime environments, containerized workloads, or isolated compute patterns.\nExperience in designing security for AI applications, AI agents, APIs, data-consuming applications, or internal developer platforms.\nExperience in Snowflake\nRelevant certifications such as:Microsoft Certified: Azure Solutions Architect Expert\nMicrosoft Certified: Azure Security Engineer Associate\nMicrosoft Certified: DevOps Engineer Expert\nAWS Certified Solutions Architect - Associate i\nGitHub Actions or GitHub Advanced Security certification\nHashiCorp Terraform certification\n\nWhat we look for\nHighly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.\nWhat we offer\nEY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations - Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom - and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.\nContinuous learning: You’ll develop the mindset and skills to navigate whatever comes next.\nSuccess as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.\nTransformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.\nDiverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.\nAbout EY\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.\nIf you can demonstrate that you meet the criteria above, please contact us as soon as possible.\nThe exceptional EY experience. It’s yours to build.\nIn compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.","description_format":"text","description_chars":7866,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Proficiency (C2)","optional":true}]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-26T17:45:50Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":31,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/ey-cloud-security-architect","json_url":"https://alion.io/job/ey-cloud-security-architect.json","meta":{"generated_at":"2026-10-30T23:20:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14563,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-cloud-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-cloud-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-cloud-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-cloud-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-cloud-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3284195}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3284195},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}