Cloud Security Engineer

Deloitte’s Government & Public Services (GPS) practice is focused on impact for federal, state, and local government clients and public higher education institutions. Within Enterprise Security, the team embeds security into digital transformation by securing a client’s technical backbone while enabling secure cloud adoption. This Cloud Security Engineer role supports cloud security architecture, engineering, monitoring, and risk reduction across AWS, GCP, and Microsoft Azure.

This position is based in Baltimore, MD and requires onsite work up to 5 days a week. The salary range is USD 107,925 - 188,000 per year, and the role calls for at least 2 years of relevant experience.

What you’ll do

• Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and configuration issues.
• Design, implement, and improve cloud security controls, including identity and access management, network security, encryption, logging, and monitoring.
• Support cloud security architecture reviews for new and existing solutions, providing recommendations aligned to security and compliance requirements.
• Investigate cloud security events and findings, analyze root causes, and support remediation with engineering and operations teams.
• Develop and maintain technical documentation, standards, baselines, and reports for cloud security controls and cloud risk management.

What you bring

• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor, with the ability to meet deadlines.
• Ability to provide clear guidance to others.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field.
• Active Secret Clearance.
• Local to the DMV area and able to work onsite up to 5 days a week.
• Ability to travel 20% on average based on client needs and industries/sectors served.
• Supporting experience in cloud security, cloud engineering, or cloud infrastructure.
• Experience implementing or assessing security controls in AWS, GCP, and Azure.
• Experience with cloud identity and access management, network security, encryption, logging, monitoring, and configuration management.
• Experience using cloud-native security tools, security posture management tools, or infrastructure as code tools.
• Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Tools and technologies

• Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure
• Identity and access management, network security, encryption, logging, monitoring, configuration management
• Cloud-native security tools, security posture management tools, infrastructure as code tools

Team focus

• Deloitte GPS Government & Public Services is designed for impact and serves federal, state, and local government clients and public higher education institutions.
• Enterprise Security embeds security across digital transformation, including security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Incentive program

You may also be eligible to participate in a discretionary annual incentive program, subject to program rules. Any award, if any, depends on various factors including individual and organizational performance.

Preferred qualifications

• Experience supporting cloud security architecture reviews, cloud migrations, or cloud transformation programs.
• Experience with security frameworks and benchmarks such as NIST, CIS, or ISO.
• Experience with scripting or automation using Python, PowerShell, Bash, or Terraform.
• Experience with container security, Kubernetes, or DevSecOps practices.
• Industry certifications such as AWS Certified Security - Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP.