Required Qualification:
- A minimum of 4 years' progressive experience in cloud security or cloud infrastructure engineering
- A minimum of 6 years' progressive experience, including hands-on CNAPP or CSPM platform delivery
- Position-specific requirements: hands-on deployment experience with Wiz is strongly preferred; equivalent depth on another CNAPP platform (Prisma Cloud, Orca, Microsoft Defender for Cloud) with demonstrated ability to convert quickly will be considered. Wiz certification (Wiz Certified Practitioner or above) is preferred, alongside at least one cloud provider security certification such as AWS Certified Security - Specialty or Microsoft AZ-500.
- Hands-on expertise with Wiz or an equivalent CNAPP platform, covering agentless scanning, the security graph, cloud entitlement analysis, and runtime protection.
- Strong practical knowledge of AWS, Azure, and GCP core services, identity and access management models, networking, and native security controls.
- Working knowledge of Kubernetes and container security, including cluster hardening, admission control, and image and registry scanning.
- Experience with infrastructure as code and CI/CD pipelines, including Terraform, and the ability to embed security scanning into developer workflows.
- Ability to translate a large volume of cloud findings into a defensible, prioritised remediation plan with named owners and realistic timelines.
- Familiarity with cloud compliance and control frameworks including CIS Benchmarks, CSA CCM, ISO 27001, PCI DSS, and regional data protection requirements.
- Excellent communication and engagement skills; ability to communicate with all levels of management and to influence engineering and platform teams without direct authority.
- Ability to ask the right questions to understand the business problem and to generate creative solutions to ambiguous problems.
- Proficiency with Microsoft PowerPoint, Excel, and Visio for design documentation and client reporting.
- The ideal candidate is a supportive, positive, self-driven, and growth-oriented individual with a consulting mindset and credibility in front of cloud engineering teams.
#LI-PM1
Preferred QualificationsWhy WWT? World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe. Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)—a collaborative ecosystem featuring state-of-the-art hardware and software—WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distribution capabilities. With more than 14,000 team members and over 60 locations globally, WWT's culture—grounded in core values and leadership philosophies—has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada.
The Solution Consultant - Cloud Security (Wiz) is responsible for the assessment, design, deployment, and operationalization of cloud native application protection capability using the Wiz platform. The role leads technical discovery, develops the target cloud security posture, and advises clients on risk prioritization, remediation ownership, and cloud security operating models. The consultant will lead connector onboarding across the client's cloud estate, tune the risk and compliance model to the client's environment, and establish the workflows that turn Wiz findings into owned and closed remediation actions.
This job description describes the general nature and level of work required by the position. It is not intended to be an all-inclusive list of qualifications, skills, duties, responsibilities or working conditions of the job. The job description is subject to change with or without notice, and Management reserves the right to add, modify or remove any qualification or duty. Nothing in this job description changes the existing at-will employment relationship between the Company and the employee occupying the position.
Job Responsibilities
- Leads Wiz deployment across multi-cloud estates, including connector onboarding for AWS, Azure, and GCP, agentless scanning configuration, and Wiz Sensor or runtime deployment where in scope.
- Assesses the client's existing cloud security posture and produces a prioritized findings and remediation roadmap tied to business risk rather than raw finding counts.
- Tunes the Wiz security graph, controls, policies, and risk scoring to the client environment to reduce noise and establish credible severity thresholds.
- Maps Wiz compliance frameworks to the client's regulatory and internal control requirements, and configures reporting for security, audit, and executive audiences.
- Integrates Wiz with the client's operational tooling, including SIEM, SOAR, ticketing, and CI/CD pipelines, and defines the remediation workflow and ownership model.
- Implements Kubernetes and container security coverage, including admission controls and cluster posture, where in scope.
- Supports shift-left adoption through IaC scanning and developer workflow integration, and coach's client teams on interpreting and acting on findings.
- Produces High Level Design, Low Level Design, build documentation, test evidence, runbooks, and operational handover material to WWT delivery standards.
- Ensures delivery milestones are established and tracked, and delivery progress is forecasted and communicated to the customer, team, and stakeholders.
- Communicates and escalates deviations in scope or timeline appropriately and ensures all contract deliverables are met within the timelines specified in the Statement of Work.
- Serves as a trusted advisor to clients, providing expert guidance on cloud security trends, technologies, and best practices.
- Supports pre-sales activity including demonstrations, proof of value execution, scoping, and effort estimation for cloud security opportunities.
