Cloud Solutions

Cloud Solutions Engineer Jobs

3 jobs found

Today

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Atlanta, GA

Atlanta, GA

Today

$105k - $208k/yr Full time Cloud Cloud Architecture Cloud Infrastructure

Apply Now

Job Description

Deloitte offers a collaborative, client‑driven environment where security professionals modernize network protection through cloud delivered zero trust architectures. This onsite role in Atlanta focuses on designing, deploying, and optimizing Zscaler capabilities across both on‑premises and cloud environments. You will deliver technical designs, client‑facing recommendations, and enable secure transformation to strengthen security posture while improving user access experiences. Compensation ranges from USD 105,400 to 207,800 per year, plus a discretionary annual incentive program. This position is based on site in Atlanta, GA.

Benefits

Discretionary annual incentive program

Responsibilities

Design, deploy, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise client environments
Support zero trust network access transformations, replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connector architectures across on‑premises and cloud environments such as AWS, Azure, and Google Cloud Platform
Develop technical deliverables, solution designs, and client‑facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years of hands-on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise environments
5+ years of hands-on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPN infrastructure
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, including BGP/static routing configurations and network segmentation to replace traditional SD-WAN platforms
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP), including workload to internet and workload to workload traffic inspection
3+ years of experience configuring and tuning Zscaler advanced security features such as Cloud Sandboxing, Advanced Threat Protection, Intrusion Prevention, Cloud Browser Isolation, and Data Loss Prevention
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management and decryption policy design
1+ years of experience with Zscaler AI powered capabilities including AI driven policy recommendations and Digital Experience Monitoring (ZDX)
3+ years of hands-on experience defining, managing, and reviewing Zscaler security policies including policy lifecycle and RBAC in the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors
3+ years of experience deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning and configuration as code
Experience designing and presenting Zscaler solution architectures tailored to client requirements and communicating effectively to executives
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM authentication within ZIA and ZPA
Ability to travel up to 50 percent
Limited immigration sponsorship may be available
Ability to work independently and as part of a team, with strong written and verbal communication skills
Meticulous attention to detail, professional demeanor, and the ability to manage multiple tasks in a dynamic environment

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
SSL/TLS inspection
AWS, Azure, GCP
BGP, VPCs, VNets, Transit Gateways
Cloud Sandboxing
Advanced Threat Protection (ATP)
Intrusion Prevention (IPS)
Cloud Browser Isolation (CBI)
Data Loss Prevention (DLP)
ZDX (Digital Experience Monitoring)
Zscaler AI powered capabilities
ZIdentity
Okta, Azure AD, Ping Identity
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Zscaler APIs

The Team

Our Enterprise Security practice weaves security into every facet of digital transformation. The team covers security architecture, secure development and deployment, end to end cyber cloud capabilities, application security, and security for emerging technologies and connected products. You will join a culture that values collaboration, rigorous delivery, and a focus on protecting client assets while enabling secure innovation.

View full job page →

2d ago

Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Deloitte Philadelphia, PA

Philadelphia, PA

2d ago

Full time Agentic Ai AI Enablement Cloud Solutions

Apply Now

Job Description

Delivery Senior Consultant, Identity & Gen AI Engineer at Deloitte focuses on engineering secure generative AI solutions with identity, access, and trust controls and embedding IAM into GenAI solution delivery.

Responsibilities

Build and integrate generative AI solutions, including LLM applications, retrieval-augmented generation, and AI agents, with secure access to data and downstream systems.
Engineer authentication, authorization, and identity controls for AI agents, service accounts, and other non-human identities operating across enterprise and cloud environments.
Develop guardrails for agentic workflows, including scoped permissions, least-privilege access, credential and secrets management, and runtime policy enforcement.
Implement logging, monitoring, and governance that provide traceability and accountability for AI system actions.
Collaborate with IAM, security architecture, and data teams to embed identity controls into GenAI solution delivery and operations.
Create and maintain reference architectures, reusable patterns, and technical documentation for building and securing AI systems.

Requirements - Required

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field
Ability to work onsite up to 5 days a week
3+ years of software engineering experience with Python or a comparable language
1+ year of hands-on experience building, integrating, or deploying generative AI solutions such as large language model (LLM) applications, retrieval-augmented generation (RAG), or AI agents, including use of model APIs, orchestration frameworks, and AI development tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor
Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on (SSO), and standards such as OpenID Connect (OIDC), Security Assertion Markup Language (SAML), OAuth, and JSON Web Token (JWT)
Ability to travel 15%, on average, based on the work you do and the clients and industries/sectors you serve
Ability to obtain and maintain the necessary security clearance
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
Delivery Center Location & Travel Requirements:
- Hybrid Work Model: Residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia)
- Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location
- Travel Requirement: Maximum of 10% overnight travel for client or project purposes
- Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance

Requirements - Preferred

Experience deploying generative AI solutions to production environments
Hands-on experience with identity and access management platforms such as SailPoint, Okta, or Microsoft Entra ID
Experience securing non-human or machine identities, service accounts, secrets, and credentials using tools such as HashiCorp Vault or CyberArk
Experience with AI agent frameworks and protocols such as LangChain, LangGraph, or Model Context Protocol (MCP)
Experience with fine-grained authorization or policy-as-code using tools such as Open Policy Agent (OPA), Cedar, or OpenFGA
Familiarity with AI and LLM security risks such as the OWASP Top 10 for LLM Applications, prompt injection, and excessive agency
Experience applying AI governance and risk frameworks such as the NIST AI Risk Management Framework (AI RMF)
2+ years of experience building or deploying workloads in cloud environments such as AWS and Microsoft Azure
Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or a cloud engineering certification such as AWS Certified Solutions Architect or Microsoft Certified: Azure Solutions Architect
1+ year of experience supporting federal government environments
1+ year of experience with infrastructure-as-code or automation technologies such as Terraform or Ansible

Technologies

Python
Claude Code
OpenAI Codex
GitHub Copilot
Cursor
SailPoint
Okta
Microsoft Entra ID
HashiCorp Vault
CyberArk
LangChain
LangGraph
Model Context Protocol (MCP)
Open Policy Agent (OPA)
Cedar
OpenFGA
AWS
Microsoft Azure
Terraform
Ansible
OpenID Connect (OIDC)
SAML
OAuth
JSON Web Token (JWT)

Team

Our Deloitte Cyber team addresses the unique challenges and opportunities businesses face in cybersecurity. We deliver powerful solutions and managed services that simplify complexity, enabling clients to operate with resilience, grow with confidence, and proactively manage risk to secure success.

Qualifications

Required

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field
Ability to work onsite up to 5 days a week
3+ years of software engineering experience with Python or a comparable language
1+ year of hands-on experience building, integrating, or deploying generative AI solutions such as large language model (LLM) applications, retrieval-augmented generation (RAG), or AI agents, including use of model APIs, orchestration frameworks, and AI development tools such as Claude Code, OpenAI Codex, GitHub Copilot, or Cursor
Working knowledge of identity and access management concepts and protocols, including authentication, authorization, single sign-on (SSO), and standards such as OpenID Connect (OIDC), Security Assertion Markup Language (SAML), OAuth, and JSON Web Token (JWT)
Ability to travel 15%, on average, based on the work you do and the clients and industries/sectors you serve
Ability to obtain and maintain the necessary security clearance
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
Delivery Center Location & Travel Requirements:
- Hybrid Work Model: Residence within a commutable distance to one of the US Delivery Center locations (Gilbert, Lake Mary, or Mechanicsburg) or Geo-Hub locations (Atlanta, Charlotte, Dallas, Houston, and Philadelphia)
- Co-location Expectation: Spend up to 30% of working time co-located at an assigned office for orchestrated opportunities, including projects, practice sessions, training, and Moments That Matter at a Deloitte Delivery Center location, Geo-Hub location, approved site, or project location
- Travel Requirement: Maximum of 10% overnight travel for client or project purposes
- Relocation Requirement: If relocation is necessary, complete the move within 12 weeks from the start date to reside within a commutable distance

Preferred

Experience deploying generative AI solutions to production environments
Hands-on experience with identity and access management platforms such as SailPoint, Okta, or Microsoft Entra ID
Experience securing non-human or machine identities, service accounts, secrets, and credentials using tools such as HashiCorp Vault or CyberArk
Experience with AI agent frameworks and protocols such as LangChain, LangGraph, or Model Context Protocol (MCP)
Experience with fine-grained authorization or policy-as-code using tools such as Open Policy Agent (OPA), Cedar, or OpenFGA
Familiarity with AI and LLM security risks such as the OWASP Top 10 for LLM Applications, prompt injection, and excessive agency
Experience applying AI governance and risk frameworks such as the NIST AI Risk Management Framework (AI RMF)
2+ years of experience building or deploying workloads in cloud environments such as AWS and Microsoft Azure
Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or a cloud engineering certification such as AWS Certified Solutions Architect or Microsoft Certified: Azure Solutions Architect
1+ year of experience supporting federal government environments
1+ year of experience with infrastructure-as-code or automation technologies such as Terraform or Ansible

View full job page →

7d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Cincinnati, OH

Cincinnati, OH

7d ago

$105k - $208k/yr Full time Cloud Platform Cloud Platforms Cloud Solutions

Apply Now

Job Description

Role context: Senior Consultant focused on guiding clients through modernizing network security with cloud-delivered zero-trust architectures (ZIA and ZPA) across on‑premises and cloud environments within the Deloitte Cyber practice.

Location

Cincinnati, OH (onsite)

Compensation

USD 105,400 - 207,800 per year

Responsibilities

Design, deploy, and operate ZIA and ZPA capabilities across enterprise client environments
Lead zero trust network access transformations, including replacement of legacy VPN infrastructure and modernization of access controls
Configure and optimize Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud‑based traffic inspection
Implement branch, cloud, and application connector architectures across on‑premises and cloud environments, including AWS, Azure, and GCP
Develop technical deliverables, solution designs, and client‑facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years of hands‑on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise environments
5+ years of hands‑on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPN infrastructure
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, and configuring BGP/static routing configurations and network segmentation, replacing traditional SD‑WAN platforms
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector, including deployment within cloud environments (AWS, Azure, and/or GCP), workload‑to‑internet and workload‑to‑workload traffic inspection, and integration with cloud‑native networking constructs (VPCs, VNets, Transit Gateways)
3+ years of experience configuring and tuning Zscaler advanced security features, including Cloud Sandboxing, Advanced Threat Protection (ATP), Intrusion Prevention (IPS), Cloud Browser Isolation (CBI), and Data Loss Prevention (DLP) policies
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling of certificate‑pinned applications
1+ years of experience with Zscaler AI-powered capabilities, including AI‑driven policy recommendations, Digital Experience Monitoring (ZDX), and leveraging Zscaler's AI/ML threat intelligence for automated threat response
3+ years of experience defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle management, access reviews, and RBAC within the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud‑native architectures
3+ years of experience deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and incident response workflows
Experience with Zscaler APIs and automation tooling (e.g., Terraform, Ansible, Python) for provisioning, policy management, and infrastructure‑as‑code workflows
Experience designing and presenting Zscaler solution architectures tailored to client requirements, translating technical concepts for executive and non‑technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM‑based authentication within ZIA and ZPA deployments
Ability to travel up to 50% on average based on client assignments and industry served
Limited immigration sponsorship may be available
Ability to work independently and as part of a team, with effective written and verbal communication skills
Meticulous attention to detail and quality of work, ability to build and sustain professional relationships
Ability to lead projects or workstreams and manage multiple tasks in a fast‑paced environment

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Zscaler Digital Experience (ZDX)
Zscaler AI powered capabilities
Zscaler APIs
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Okta, Azure AD, Ping Identity
SAML/SCIM based authentication
VPCs, VNets, Transit Gateways
SSL/TLS inspection
Cloud Sandboxing, ATP, IPS, CBI, DLP
ZIdentity

The Team

Our Enterprise Security offering weaves security into every phase of digital transformation, protecting a client’s technical backbone while enabling secure innovation. The practice encompasses security architecture, secure development and deployment, end‑to‑end cyber cloud capabilities, application security, and protections for emerging technologies and connected products.

View full job page →

Cloud Solutions Engineer Jobs

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Delivery Senior Consultant, Software Engineering Solutions, Identity & Gen AI Engineer

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Get Cloud Solutions Engineer Jobs alerts