AI Cloud Security Engineer - Consultant

Deloitte is looking for an AI Cloud Security Engineer, Consultant to help clients design, build, and secure next-generation AI-enabled products, platforms, and cloud environments. Join Cyber and Cloud Security teams focused on adopting emerging technologies securely and at scale, with an engineering approach that brings together AI, cybersecurity, cloud, and software delivery to create reusable platforms, accelerators, reference architectures, and implementation patterns.

What you will do

• Design secure architectures for generative AI, agentic AI, retrieval-augmented generation (RAG), model serving, and AI-enabled enterprise applications, applying AI Zero Trust across models, agents, tools, application programming interfaces (APIs), data, cloud workloads, development pipelines, and runtime environments.
• Embed security throughout the AI software development lifecycle, including threat modeling, security gates, model and prompt versioning, evaluation datasets, approval workflows, release criteria, and AI-specific security testing, using AI coding tools with human review and secure engineering controls.
• Design and implement secure AI workloads across Amazon Web Services, Microsoft Azure, Google Cloud, and hybrid environments, covering cloud landing zones, network isolation, private connectivity, logging, encryption, key management, data protection, containers, serverless workloads, Kubernetes, policy-as-code controls, and automated remediation.
• Build AI-assisted threat and vulnerability management capabilities to identify, analyze, prioritize, test, and remediate issues across code, applications, APIs, cloud configurations, infrastructure, containers, dependencies, and AI workloads, including human approval and validation before high-impact remediation is deployed.
• Develop production AI security applications and platforms through full-stack engineering, including user experiences, APIs, backend services, microservices, event-driven workflows, RAG, model integrations, and observability, along with unit, integration, end-to-end, performance, security, and AI evaluation testing.
• Collaborate with client teams across engineering, security, product, data, risk, architecture, and executives to lead discovery, workshops, architecture sessions, design reviews, solution delivery, production deployment, and operational handoff, producing reference architectures, patterns, standards, playbooks, and accelerators.

What you bring

• Bachelor’s degree in Information Technology, Computer Science, Artificial Intelligence, Cybersecurity, Computer Engineering, or Software Engineering; equivalent professional work experience may be considered in lieu of a degree for software engineering, AI engineering, cybersecurity, cloud security, application security, or technology consulting.
• 2+ years of professional experience in software engineering, AI engineering, cybersecurity, cloud security, application security, or technology consulting, delivering production solutions across design, development, testing, deployment, and operational support.
• Hands-on experience with at least one AI platform: Anthropic Claude, Claude Code, OpenAI, Google Gemini, Amazon Bedrock, or Vertex AI.
• Experience designing or implementing cloud security architecture and DevSecOps practices for secure application development, security, and operations, infrastructure security, or AI security controls.
• Experience building and deploying APIs, database-backed services, distributed systems, or cloud applications using Python, TypeScript, JavaScript, Go, or Java, including automated testing, deployment, and observability.
• Ability to travel up to 50% on average based on client work and industries served.
• Limited immigration sponsorship may be available.

Tools and technologies you may work with

• AI platforms: Anthropic Claude, Claude Code, OpenAI, Google Gemini, Amazon Bedrock, Vertex AI
• Cloud and infrastructure: Amazon Web Services, Microsoft Azure, Google Cloud, Kubernetes, Terraform
• Security and policy: Open Policy Agent, Checkov, tfsec, Kyverno, SAST, DAST, software composition analysis, secrets scanning, container security tools
• Application development: React, Next.js, Node.js, FastAPI, GraphQL, REST APIs, microservices, event-driven systems, Infrastructure-as-code, policy-as-code controls, RAG

Compensation

Estimated wage range: $82,600 to $162,800 per year. You may also be eligible to participate in a discretionary annual incentive program, subject to program rules and factors including individual and organizational performance.