Cybersecurity Architecture Manager - Cloud Security

Responsibilities

• Drive cloud security strategy, technology standards, roadmaps, and practices as part of the cloud security program vision and governance
• Partner with US Infrastructure to define requirements and deliver cloud security solutions aligned to Deloitte policies, primarily for public cloud and secondarily for on-premises
• Align US cloud security direction with Deloitte Global by partnering on cyber strategy, standards, initiatives, and priorities
• Evaluate new solutions and define how to incorporate emerging technologies safely and securely based on data classification and compliance needs
• Monitor cloud security trends, developments, and emerging threats, then translate business drivers into future technology and security needs
• Communicate implications of architectural decisions to business and IT leadership, including issues and plans
• Work across cloud teams and business units to define security requirements and design cloud platform solutions for specific projects or capabilities
• Lead cloud security architecture on assigned projects using any Cloud Service Provider (CSP), ensuring secure design and implementation for SaaS, PaaS, and IaaS
• Guide implementation of new cloud infrastructure methodologies and security service changes in line with business requirements and security guidelines
• Design or evaluate tools that improve platform availability using automated protection mechanisms
• Collaborate with development teams on Infrastructure as Code (IaC), automation, and orchestration, working in Agile with scrum teams on secure solution architecture and sprint user story planning
• Enable shift-left security by embedding automated controls, policy-as-code enforcement in CI/CD, and security scanning into developer workflows
• Manage cloud security processes and supporting tools, validate security controls, and review control designs to confirm they are effective
• Collaborate with cloud engineers to address security risks, implement controls across the cloud platform lifecycle, and provide mitigation recommendations
• Oversee implementation of cloud security capabilities performed by the US Infrastructure team (which does not report into this role), providing technical direction to confirm delivered solutions meet approved architecture, standards, and control requirements
• Mentor engineers and architects, provide technical guidance on data flows and cloud application security issues, and support product teams in leveraging compliance and security to create value
• Lead resolution of highly sensitive and confidential issues and act as a trusted advisor to internal stakeholders
• Monitor service standards for supported internal teams and business units, demonstrate flexibility and innovation, and recommend improvements to management

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
• Minimum of 6 years of directly related experience in cloud-based development and security management, including subject matter expertise in the areas managed
• Minimum of 1 year of people and/or process management experience
• Ability to travel 10% on average
• Legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

AWS, Azure, Azure Resource Manager, Azure Commercial offerings, GCP; IaaS, PaaS, SaaS; Zero Trust architecture, least-privilege, just-in-time access; Cloud Access Security Broker (CASB); encryption and key management; multi-factor authentication (MFA); SIEM; DevOps; CI/CD pipelines; Infrastructure as Code (IaC); automation and orchestration; containerized workloads; ISO 27001; NIST; Windows and Linux; Palo Alto Networks Prisma Cloud, Cortex; CNAPP, CSPM, CWPP, CIEM, DSPM, KSPM, ASPM; IaC security scanning and policy-as-code enforcement in CI/CD; WAAS; CDR; XDR (Cortex XDR); SOAR (Cortex XSOAR); XSIAM; ASM (Cortex Xpanse); microsegmentation; Zero Trust network access (ZTNA); CCSP.

Preferred

• Hands-on depth with at least one major public cloud platform (AWS, Azure including Azure Resource Manager and Azure Commercial offerings, or GCP) across IaaS, PaaS, and SaaS, with working knowledge of the others
• Experience designing small and large-scale solutions with emphasis on security and performance
• Solid understanding of Zero Trust architecture, including least-privilege and just-in-time access, identity-centric controls, and continuous verification
• Background in IAM, CASB, encryption and key management, MFA, and SIEM
• Working DevOps experience to design and enable shift-left security controls in CI/CD, including IaC, automation, orchestration, and containerized workloads
• Knowledge across IT infrastructure with security frameworks and standards such as ISO 27001 and NIST
• Experience deploying web and service-based applications in Windows and Linux environments
• Understanding of general design principles for web applications, data lakes, and AI/ML capabilities
• Demonstrated experience developing multi-tier and cross-platform architecture plans, including enterprise workflows and distributed intranet/internet architecture
• Experience with large-scale enterprise cloud projects from ideation through finished production
• Experience as an Enterprise Security Architect and/or Systems Engineer designing cloud frameworks or implementing cloud security
• Hands-on experience with Palo Alto Networks Prisma Cloud and/or Cortex
• Experience with capabilities delivered through those platforms: CNAPP, CSPM, CWPP, CIEM, DSPM, KSPM, ASPM, IaC security scanning and policy-as-code enforcement in CI/CD, and WAAS
• Experience implementing microsegmentation and Zero Trust network access (ZTNA) at enterprise scale
• Any of AWS, GCP, Azure, or CCSP certification

Work complexity and independent judgment

• Substantially complex, varied work requiring selection and application of technical and detailed guidelines
• Independent judgment to identify, select, and apply appropriate methods and interpret precedent
• Supervision typically provides direction on complex projects and new duties and priorities

Skills

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication, with meticulous attention to detail
• Ability to build and sustain professional relationships, lead projects or workstreams, and mentor others
• Strong interpersonal skills, professional demeanor, and ability to prioritize multiple tasks in a fast-paced environment
• Ability to meet deadlines and provide clear guidance to others

Areas of focus include

• Risk & Compliance
• Identity & Access Management
• Data Protection
• Cyber Design
• Incident Response
• Security Architecture
• Business Partnership