Cloud Security Engineer Manager

Deloitte seeks a Cloud Security Engineer Manager to lead the design, implementation, and ongoing operation of an enterprise-class, application-centric micro-segmentation service. The role functions as the subject-matter expert on zero-trust concepts and coordinates across application, network, and cloud engineering teams to safeguard critical assets.

Responsibilities

• Assist in the design, implementation, and sustainment of zero trust architectures to protect critical assets and data from evolving cyber threats.
• Act as the subject matter expert for application micro-segmentation and zero-trust principles, methodologies, and technologies.
• Collaborate with Network and Firewall Teams, Application Teams, Server Teams, Cloud Engineering Teams, and others to design, implement, and support an enterprise-class, application-centric micro-segmentation solution and service.
• Lead the deployment of micro-segmentation to protect critical applications within a multi-year program.
• Identify new service requirements aligned with the Zero Trust strategy.
• Lead and assist in troubleshooting for the micro-segmentation service.

Requirements

• Bachelor's degree or equivalent in Information Technology, Computer Science, or Engineering.
• Minimum of 6 years of related cyber security experience with a focus on network security engineering, including firewall policy design, rule management, and hands-on experience securing east-west traffic in enterprise environments.
• Proficiency in Python development for automation and scripting, including experience building security tooling, policy automation, or infrastructure-as-code workflows.
• Strong networking fundamentals with demonstrated experience across cloud environments (AWS, Azure, or GCP) and on-premises data center infrastructure, including VLANs, subnetting, routing protocols, firewall policy, and east-west traffic segmentation.

Technologies

• Python, PowerShell, Bash
• AWS, Azure, GCP
• Windows Server, Linux
• VMware, Hyper-V
• Palo Alto, Cisco
• Windows Packet Filtering, IPTables
• Wireshark, Illumio, Guardicore, Cisco Secure Workload
• Infrastructure-as-a-Service (IaaS)
• Software-Defined Networking (SDN)
• Containers
• NIST 800-207 (Zero Trust Architecture), Zero Trust Framework

Benefits

• Discretionary annual incentive program

The Team

Deloitte Technology US (DT - US) supports Deloitte by delivering cutting-edge internal and go-to-market solutions that enable effective operations and market leadership. The group comprises approximately 3,000 professionals focused on Cyber Security, Technology Support, Technology & Infrastructure, Applications, Relationship Management, Strategy & Communications, Project Management, and Financials.

The Cyber Security team leads a strategic risk program that adapts to a dynamic threat landscape, evolving business strategies, risks, and vulnerabilities. Through situational awareness, threat intelligence, and a security-first culture, the team helps protect the Deloitte brand. Focus areas include Risk & Compliance, Identity & Access Management, Data Protection, Cyber Design, Incident Response, Security Architecture, and Business Partnership.