CybersecurityJobs.io
← Back to all jobs
Deloitte

Senior Consultant Cybersecurity Architecture - Cloud Security

Deloitte
Midland, MI $103k - $211k/yr Full time Posted 1d ago
Cloud Platforms Cloud Security Cloud Security Architecture Cybersecurity Architecture Data Security Information Security InfoSec Security Security Architecture Solution Architecture
Apply Now

Job Description

Join Deloitte as a Senior Consultant focused on cloud security architecture, serving as a technical interface and SME for enterprise application-centric micro-segmentation and zero trust service delivery.

Responsibilities

  • Support the design, implementation, and sustainment of zero trust architectures to help safeguard critical assets and data against emerging cyber threats.
  • Act as subject matter expert for application micro-segmentation and zero-trust principles, methodologies, and technologies.
  • Collaborate with Network and Firewall Teams, Application Teams, Server Teams, Cloud Engineering Teams, and others to design, implement, and operate an enterprise-class application-centric micro-segmentation solution.
  • Lead micro-segmentation implementation to help protect critical applications as part of a multi-year program.
  • Identify new service requirements supporting the organization’s Zero Trust strategy.
  • Lead and support troubleshooting for the micro-segmentation service across teams and vendors.

Requirements

  • Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.
  • Minimum 8 years of various technology experience.
  • Minimum 4 years related cybersecurity experience focused on network security engineering, including:
    • Firewall policy design
    • Rule management
    • Hands-on experience securing east-west traffic in enterprise environments
  • Proficiency in Python for automation and scripting, including building security tooling, policy automation, or infrastructure-as-code workflows.
  • Networking fundamentals with hands-on experience across cloud (AWS, Azure, or GCP) and on-premises data center infrastructure, including:
    • VLANs
    • Subnetting
    • Routing protocols
    • Firewall policy
    • East-west traffic segmentation
  • Must be legally authorized to work in the United States without employer sponsorship, now or in the future.
  • Ability to travel 0-10% on average.

Preferred

  • Experience with micro-segmentation platforms such as Illumio, Guardicore, and Cisco Secure Workload.
  • Practical application of Zero Trust principles including least-privilege access, identity-aware policy enforcement, and network segmentation strategy.
  • Experience deploying, managing, and tuning micro-segmentation security policies.
  • Networking knowledge and traffic analysis experience using Wireshark.
  • Experience with virtualization technologies such as VMware and Hyper-V.
  • Experience with cloud platforms such as Azure, GCP, and/or AWS.
  • Understanding application tiering architecture (web, application, database), communication patterns, and application connectivity.
  • Experience with Windows Server and Linux operating systems.
  • Knowledge of Zero Trust Framework or NIST 800-207 (Zero Trust Architecture).
  • Experience working with management, stakeholders, and vendors.
  • Familiarity with Infrastructure-as-a-Service (IaaS), Software-Defined Networking (SDN), and containers.
  • Experience designing and managing firewalls or other network segmentation tools.
  • Experience setting up, configuring, creating policies, and troubleshooting firewalls including Palo Alto, Cisco, Windows Packet Filtering, and IP Tables.
  • Strong scripting experience in one or more languages such as PowerShell, Python, or BASH.
  • System forensics and investigation skills, including analyzing file system, memory, running processes, network connections, and logs.
  • Certifications such as CISSP, GIAC, CCNA, or other related information security certifications.

Technologies

  • Python
  • AWS, Azure, GCP
  • Illumio, Guardicore
  • Cisco Secure Workload
  • Wireshark
  • VMware, Hyper-V
  • IaaS, Software-Defined Networking (SDN), Infrastructure-as-a-Service (IaaS)
  • Containers
  • Windows Packet Filtering, IP Tables
  • Palo Alto, Cisco
  • PowerShell, BASH
  • NIST 800-207, Zero Trust Framework
  • CISSP, GIAC, CCNA

Location

  • Midland, MI (onsite)

Salary

  • USD 102,500 - 210,600 per year

Benefits

  • May be eligible for a discretionary annual incentive program, subject to program rules and dependent on individual and organizational performance.

Similar Jobs