DE-Azure Cloud Network and Security - SM-GDSN02

Career Family : Azure Network and Security Architect

The opportunity

We are the only professional services organization who has a separate business dedicated exclusively to the financial services marketplace. Join Digital Engineering Team and you will work with multi-disciplinary teams from around the world to deliver a global perspective. Aligned to key industry groups including Asset management, Banking and Capital Markets, Insurance and Private Equity, Health, Government, Power and Utilities, we provide integrated advisory, assurance, tax, and transaction services. Through diverse experiences, world-class learning and individually tailored coaching you will experience ongoing professional development. That’s how we develop outstanding leaders who team to deliver on our promises to all of our stakeholders, and in so doing, play a critical role in building a better working world for our people, for our clients and for our communities. Sound interesting? Well, this is just the beginning. Because whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

We are seeking a Senior Manager – Identity, Security & Networking at EY GDS. This role focuses on enterprise cloud security architecture, identity centric security models, hybrid Active Directory modernization, and secure networking, with strong leadership and client advisory responsibility.

EY Digital Engineering is a unique, industry-focused business unit that provides a broad range of integrated services that leverage deep industry experience with strong functional capability and product knowledge. The Digital Engineering practice works with clients to analyse, formulate, design, mobilize and drive digital transformation initiatives. We advise clients on their most pressing digital challenges and opportunities surround business strategy, customer, growth, profit optimization, innovation, technology strategy, and digital transformation.  We also have a unique ability to help our clients translate strategy into actionable technical design, and transformation planning/mobilization.  Through our unique combination of competencies and solutions, EY’s DE team helps our clients sustain competitive advantage and profitability by developing strategies to stay ahead of the rapid pace of change and disruption and supporting the execution of complex transformations.

Your key responsibilities

• Define and govern enterprise wide security architectures aligned with Zero Trust principles and regulatory requirements.
• Act as a trusted advisor to clients on cloud security strategy, identity centric security models, and risk mitigation.
• Lead security architecture design across Azure and hybrid environments, ensuring confidentiality, integrity, and availability.
• Establish architectural standards for identity, access, network security, and workload protection.
• Lead design and modernization of Microsoft Entra ID (Azure AD) and hybrid Active Directory architectures.
• Define identity governance, authentication, authorization, and conditional access strategies.
• Drive implementation of SSO, MFA, RBAC, Privileged Identity Management (PIM), and identity lifecycle management.
• Oversee AD modernization initiatives including domain consolidation, hybrid identity, and cloud only identity strategies.
• Ensure integration with enterprise applications, SaaS platforms, and hybrid/cloud workloads.
• Define and govern secure enterprise networking architectures across cloud, on prem, and hybrid environments.
• Drive adoption of Azure networking services including VNet design, NSGs, Application Gateway, Azure Firewall, Load Balancer, VPN Gateway, ExpressRoute, and private endpoints.
• Architect secure connectivity patterns between cloud platforms, data centres, SaaS providers, and partner ecosystems.
• Promote network segmentation, secure ingress/egress, and resilient network design.
• Define security governance frameworks covering policies, standards, controls, and operational processes.
• Oversee implementation of security monitoring, logging, and threat detection using Microsoft Defender, Sentinel, and native security tooling.
• Ensure compliance with industry regulations and enterprise risk frameworks, particularly in regulated industries (FS, public sector).
• Guide clients on incident readiness, audit preparation, and continuous security improvement.
• Provide security and network architecture leadership across large scale cloud and platform transformation programs.
• Partner with cloud, data, integration, and application teams to ensure security is embedded by design.
• Review and assure solution designs, mitigating risks while enabling business agility.
• Lead, mentor, and develop security, identity, and networking architects/engineers.
• Serve as a senior security advisor to executive stakeholders and client leadership teams.
• Contribute to pre sales, solutioning, proposals, and thought leadership in cloud security and identity.
• Drive internal capability development, reusable security patterns, accelerators, and best practices.
• Stay current with emerging security threats, identity innovations, and cloud networking trends.

Skills and attributes for success

• Deep understanding of cloud security architecture and identity driven security models.
• Strong expertise in Microsoft Entra ID (Azure AD), Active Directory, hybrid identity, and access governance.
• Experience with conditional access, MFA, RBAC, PIM, identity federation, and directory synchronization.
• Strong knowledge of networking fundamentals including routing, DNS, firewalls, VPNs, and network protocols.
• Hands on experience designing secure Azure networking architectures, ExpressRoute, VPN, and private access models.
• Experience implementing network segmentation and Zero Trust networking patterns.
• Familiarity with Microsoft Defender, Azure security services, logging, monitoring, and SIEM/SOAR concepts.
• Understanding of security posture management, vulnerability management, and threat modeling.
• Proven ability to lead complex security and cloud programs in enterprise environments.
• Strong stakeholder management and communication skills with technical and executive audiences.
• Analytical and problem solving mindset with ability to balance risk and business enablement.
• Passion for continuous learning and developing high performing security teams.

Preferred Qualifications:

• Microsoft Certified: Identity and Access Administrator / Azure Security Engineer / Security Solutions Architect (preferred).
• 8–10+ years’ experience in security architecture, identity, or enterprise networking roles.
• Experience operating in regulated, security sensitive environments.
• Familiarity with Zero Trust, defence in depth, and compliance frameworks.
• Problem-Solving: Strong analytical skills with the ability to troubleshoot and resolve complex issues.
• Agile Methodologies: Familiarity with Agile development practices and methodologies.

Education:

• Degree: Bachelor’s degree in computer science, Engineering, Information Technology, or a related field, or equivalent practical experience

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations – Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.