Deloitte’s Government & Public Services (GPS) practice is hiring a Cloud Security Engineer to help strengthen cloud security across AWS, GCP, and Microsoft Azure. In this onsite role in Rosslyn, VA, you will support cloud security architecture and engineering, monitor and investigate security events, and reduce cloud risk by identifying gaps and implementing security controls.

What you’ll do

Assess cloud environments across AWS, GCP, and Microsoft Azure to identify security risks, control gaps, and configuration issues.
Design, implement, and improve cloud security controls, including identity and access management, network security, encryption, logging, and monitoring.
Support cloud security architecture reviews for new and existing solutions and provide recommendations aligned to security and compliance requirements.
Investigate cloud security events and findings, analyze root causes, and support remediation activities with engineering and operations teams.
Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.

Required qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field.
Active Secret Clearance.
Local to the DMV area and able to work onsite up to 5 days per week.
Ability to travel 20% on average, based on work, clients, and the industries or sectors served.
2+ years of experience supporting cloud security, cloud engineering, or cloud infrastructure.
Experience implementing or assessing security controls in AWS, GCP, and Azure.
Experience with cloud identity and access management, network security, encryption, logging, monitoring, and configuration management.
Experience using cloud-native security tools, security posture management tools, or infrastructure as code tools.
Legally authorized to work in the United States without employer sponsorship, now or in the future.

Technologies you may work with

Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure
Python, PowerShell, Bash
Terraform
National Institute of Standards and Technology (NIST), Center for Internet Security (CIS), International Organization for Standardization (ISO)
Kubernetes

Team and focus

In Deloitte’s GPS organization, professionals serve federal, state, and local government clients and public higher education institutions. Deloitte’s Enterprise Security offering embeds security across digital transformation, including security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Additional skills that support success

Ability to work independently and collaborate within a team.
Effective written and verbal communication skills.
Meticulous attention to detail and quality of work product.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines.
Ability to provide clear guidance to others.

Preferred experience

Experience supporting cloud security architecture reviews, cloud migrations, or cloud transformation programs.
Experience with security frameworks and benchmarks such as NIST, CIS, or ISO.
Experience with scripting or automation using Python, PowerShell, Bash, or Terraform.
Experience with container security, Kubernetes, or DevSecOps practices.
Industry certifications including AWS Certified Security - Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP.

Compensation and incentives

USD 107,925 - 188,000 per year. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the position location. You may also be eligible to participate in a discretionary annual incentive program, subject to program rules and factors including individual and organizational performance.

Cloud Security Engineer

Job Description