Deloitte is hiring a Cloud Security Engineer to help strengthen security across AWS, GCP, and Microsoft Azure. This role sits on Deloitte’s Cloud Security team within Government & Public Services, supporting secure cloud adoption through architecture reviews, control implementation, monitoring, and risk reduction. You’ll work with an Enterprise Security offering that embeds security across digital transformation, helping secure technical backbones while enabling secure delivery of new capabilities.

Location: Rosslyn, VA (onsite)

Compensation: USD 107,925 - 188,000 per year

What You’ll Do

As a Cloud Security Engineer on the Cloud Security team, you will assess cloud environments and help drive improvements that reduce security risk. You will partner with engineering and operations teams to investigate security events, support remediation, and establish repeatable security practices through documentation and reporting.

Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and configuration issues.
Design, implement, and improve cloud security controls covering identity and access management, network security, encryption, logging, and monitoring.
Support cloud security architecture reviews for both new and existing solutions and provide recommendations aligned to security and compliance requirements.
Investigate cloud security events and findings, analyze root causes, and support remediation activities with engineering and operations teams.
Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field.
Active Secret Clearance.
Ability to work onsite up to 5 days a week and be local to the DMV area.
Ability to travel 20%, on average.
2+ years of experience supporting cloud security, cloud engineering, or cloud infrastructure.
Experience implementing or assessing security controls in AWS, GCP, and Azure.
Experience with cloud IAM, network security, encryption, logging, monitoring, and configuration management.
Experience using cloud-native security tools, security posture management tools, or infrastructure as code tools.
Legally authorized to work in the United States without employer sponsorship, now or in the future.

Tools, Frameworks, and Skills

Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure
Python, PowerShell, Bash, Terraform
NIST, CIS, ISO
Kubernetes

Team and Work Context

Deloitte’s Government & Public Services (GPS) practice delivers impact for federal, state, and local government clients and public higher education institutions. The Enterprise Security offering focuses on securing the technical backbone while enabling secure digital transformation, including security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Additional Strengths

Ability to work independently and collaborate as part of a team
Effective written and verbal communication
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others

Preferred Qualifications

Experience supporting cloud security architecture reviews, cloud migrations, or cloud transformation programs
Experience with security frameworks and benchmarks including NIST, CIS, or ISO
Experience with scripting and automation using Python, PowerShell, Bash, or Terraform
Experience with container security, Kubernetes, or DevSecOps practices
Industry certifications such as AWS Certified Security - Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP

The wage range disclosed for this role estimate has not been adjusted for applicable geographic differential, and a reasonable estimate is USD 107,925 to 188,000. You may also be eligible to participate in a discretionary annual incentive program, subject to program rules and factors including individual and organizational performance.

Cloud Security Engineer