DevSecOps & Cloud Security Engineer - Senior - EY GDS

We are seeking a highly skilled Cyber Security Consultant with strong experience in Security Operations, DevSecOps, and Cloud Security, primarily within Microsoft Azure and AWS environments. The successful candidate will be responsible for designing, implementing, and operating security controls across cloud platforms, automating operational processes through DevOps methodologies, and ensuring the security, availability, monitoring, and resilience of critical enterprise services.

Key Responsibilities

• Manage and secure cloud environments in Microsoft Azure and Amazon Web Services (AWS).
• Design and implement DevSecOps processes by integrating security controls throughout the Software Development Life Cycle (SDLC).
• Build, maintain, and optimize CI/CD pipelines using Azure DevOps and GitHub Actions.
• Automate operational and security processes using PowerShell, Bash, and Ansible.
• Deploy, administer, and support containerized environments using Kubernetes and Docker.
• Participate in the monitoring, support, and operation of critical production environments.
• Lead incident response, troubleshooting, root cause analysis, and remediation activities.
• Implement and maintain monitoring solutions to ensure platform availability and performance.
• Collaborate with Development, Infrastructure, and Security teams to ensure adherence to security standards and best practices.
• Manage service requests, incidents, and change activities through ServiceNow.
• Develop technical documentation, operational procedures, and security standards.

Required Experience

Mandatory

• Minimum of 5 years of experience in Cybersecurity, DevSecOps, Cloud Security, or related fields.
• Hands-on experience managing Microsoft Azure environments.
• Hands-on experience managing AWS environments.
• Strong experience with Azure DevOps and CI/CD pipeline implementation.
• Proficiency with Git and GitHub Actions.
• Experience with automation technologies including PowerShell, Bash, and Ansible.
• Experience deploying and managing Kubernetes and Docker environments.
• Strong background in incident management, troubleshooting, and production support.
• Experience using ServiceNow or similar IT Service Management (ITSM) platforms.
• Working knowledge of SQL for data querying and analysis.

Preferred

• Experience implementing Secure Software Development Life Cycle (S-SDLC) practices.
• Experience with Infrastructure as Code (IaC) methodologies and tools.
• Knowledge of Cloud Security frameworks and industry best practices.
• Experience supporting highly available enterprise environments.
• Relevant cloud, security, or containerization certifications.

Technical Skills

Cloud Platforms

• Microsoft Azure
• Amazon Web Services (AWS)

DevOps / DevSecOps

• Azure DevOps
• Git
• GitHub Actions
• CI/CD Pipelines
• Secure SDLC (S-SDLC)

Automation

• PowerShell
• Bash
• Ansible

Container Technologies

• Kubernetes
• Docker

Operations & Support

• ServiceNow
• Incident Management
• Problem Management
• System Monitoring
• Operational Support

Database Knowledge

• SQL

Core Competencies

• Analytical and problem-solving skills.
• Technical leadership.
• Strong customer and service orientation.
• Effective communication skills.
• Team collaboration and stakeholder engagement.
• Ability to manage priorities in fast-paced environments.
• Continuous improvement mindset.
• Strong sense of ownership and accountability.

Certifications(Nice to have)

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• AWS Certified Security - Specialty
• AWS Certified Solutions Architect
• Certified Kubernetes Administrator (CKA)
• Certified Cloud Security Professional (CCSP)
• CompTIA Security+