TC-CS-Cyber Architecture- OT and Engineering-infrastructure and Cloud Security- Senior Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

IT Network & Infrastructure Security – Senior Manager   Role summary We are looking for a Senior Manager to lead and scale the Zero Trust Security Portfolio across EY GDS. This role will be responsible for leading complex client programs, building high-performing teams, and driving innovation across Infrastructure Security capabilities. The Senior Manager will act as a trusted advisor to senior client stakeholders and internal leadership, helping organizations transition from traditional security to Zero Trust Security. The role requires deep experience in cybersecurity architecture, network security, and zero trust security in cyber.   Key responsibilities

Lead the design and implementation of network and infrastructure security strategies across enterprise & cloud environments. Drive adoption of Zero Trust and advanced segmentation architectures. Oversee deployment and governance of NGFW, NAC, VPN, ZTNA, SASE, DNS security, CASB, and CSPM solutions. Experience in Zero Trust Security Architecture and Solution Design. Experience in zero-trust and micro-segmentation solutions including Zscaler, Guardicore and Illumio. Define logical patterns & develop use cases for zero trust capabilities across Network, Identity & Access Management, Device, Application and other security domains Work in multiple domains of security technologies viz Network segmentation, Application gateways, security automation, Firewalls, VPN, SDN, SD-WAN, IAM solutions. Possess hands on experience in segmenting networks, applications, and data to limit exposure to attacks. Good exposure in requirement understanding, security frameworks, technical documentation, designing HLDs and LLDs. Well-versed in encrypting all end-to-end communication regardless of the location, authorizing access to resources on a per-session basis, enforcing the temporary and dynamic nature of authentication and authorization. Monitoring all assets to be in the most secure state possible and maintaining visibility into the security of the entire network and business's resources. Demonstrate a deep understanding of zero trust market needs/challenges and assist in the planning, design and development of go-to-market solutions. Understand SaaS based technologies and identity-based micro-segmentation for cloud workloads and their implications for the enterprise. Document or enhance documentation on zero-trust architecture requirements. Build reusable methods, accelerators, reference architectures, and runbooks that strengthen the firm’s Zero Trust, Network & Infrastructure Security offerings and improve repeatability across sectors and accounts. Manage client expectations, delivery scope, solution quality, risks, and technical escalations while coaching teams and enabling long-term client capability through documentation and knowledge transfer.

12+ years of experience across Network & Infrastructure security domain, Zero Trust Security, or related fields. Expertise in  Zero Trust, and regulatory frameworks (NIST 800-207, NIST 800-53, ZT DoD, CISA ZTMM). Hands-on with NGFWs (Palo Alto, Cisco, Fortinet, Azure Firewall) and VMware virtualization security. Skilled in SSE/SASE platforms (Netskope, Zscaler, Akamai) and secure access technologies (VPN, ZTNA, DNS security). Strong capability in multi-vendor security integration across IT, OT, and cloud environments. Strong client-facing communication and the ability to operate as a trusted technical advisor to senior stakeholders. Deep technical understanding of zero trust architecture and solutioning of