Cybersecurity Architecture Manager - Cloud Security

Responsible for ensuring the delivery of the cloud security strategy, and for the architecture and implementation of the cloud cybersecurity systems that carry it out, in partnership with US Infrastructure and US Cybersecurity leadership. Establishes and maintains the capabilities required to secure data and applications operating in dynamic cloud computing environments, provides oversight into and integration of security solutions, and monitors security controls to ensure compliance with firm standards. Recruiting for this role ends on 12/7/2026. Work you’ll do This role is a key driver in determining the firm's cloud security strategy and roadmap. The Manager sets direction on cloud controls and best practices for the firm's cloud foundations, evaluates new solutions, and develops the supporting elements required to adopt new technologies in a safe and secure manner, including the controls required by data classification and compliance obligations. That partnership with US Infrastructure extends into design and delivery of cloud security solutions, focused primarily on public cloud environments with some responsibility for on-premises environments. The role also partners with Deloitte Global on cyber strategy, keeping US cloud security direction aligned with global priorities and standards. The Manager supports cross-functional cloud teams in advancing capabilities across cloud security architecture, engineering and operations, contributes to the cloud security program and governance agenda, and helps develop strategic relationships with key alliance partners.

Responsibilities:

Strategy and partnership

• Act as a key driver in determining the firm's cloud security strategy, technology standards, roadmaps, and practices under the oversight of US Cybersecurity leadership, and contribute to the overall vision and governance of the cloud security program
• Partner with US Infrastructure to define requirements and deliver cloud security solutions that meet Deloitte policies, primarily across public cloud environments and secondarily on-premises
• Partner with Deloitte Global on cyber strategy, aligning US cloud security direction with global standards, initiatives, and priorities
• Help drive strategic relationships with key alliance partners and technology vendors
• Evaluate new solutions and develop the supporting elements required to incorporate new technologies safely and securely, based on data classification and compliance requirements
• Monitor cloud security industry trends, developments, and emerging threats
• Incorporate business drivers, needs and strategies to address future business and technology needs
• Communicate the implications of architectural decisions, issues and plans to business and IT leadership

Architecture and engineering

• Work across cloud teams and business units to define security requirements and design cloud platform solutions
• Architect and design comprehensive solutions that meet business security requirements in support of a given project or capability
• Lead cloud security architecture on assigned projects using any Cloud Service Provider (CSP)
• Ensure the secure design and implementation of SaaS, PaaS, and IaaS technologies that support security initiatives
• Guide the implementation of new cloud infrastructure methodologies, concepts, and changes to security services in line with business requirements and security guidelines
• Design or evaluate new tools for improving platform availability using automated protection mechanisms
• Work closely with development teams on Infrastructure as Code, automation, and orchestration
• Work in Agile methodology and partner with scrum teams on secure application and infrastructure solution architecture, planning user stories for sprints while addressing requirements and orchestrating security impact
• Enable shift-left security by embedding automated controls, policy-as-code, and security scanning directly into CI/CD pipelines and developer workflows

Controls, operations and governance

• Manage cloud security processes and supporting tools
• Validate security controls to ensure adherence with firm security standards
• Review control designs and validate their implementation to confirm they are effective
• Collaborate with cloud engineers to address security risks and drive the implementation of controls across the entire cloud platform lifecycle, providing mitigation recommendations
• Provide operational support and participate in Agile teams focused on business unit success

Leadership and collaboration

• Oversee the implementation of cloud security capabilities performed by the US Infrastructure team, which does not report into this role, working across multiple technical disciplines, including developers, subject matter experts, database administrators, system administrators, and system architects, to provide technical direction and confirm that delivered solutions conform to the approved architecture, standards, and control requirements
• Mentor engineers and architects in modern cloud best practices
• Provide technical guidance and foster a collective understanding of data flows and the security issues encountered in cloud applications and services
• Develop relationships with product teams by helping them leverage compliance and security to drive value for their products and practices
• Lead others in the resolution of highly sensitive and confidential issues on behalf of the team
• Act as a trusted advisor to internal stakeholders and participate in their decision-making process, including presenting alternatives and information
• Monitor service standards for the internal teams and business units the role supports
• Exhibit a high level of professional flexibility, volunteering innovation and new ideas

Work Complexity and Independent Judgment:

• Work is substantially complex and varied, and regularly requires the selection and application of technical and detailed guidelines
• Independent judgment is required to identify, select and apply the most appropriate methods, as well as to interpret precedent
• Supervision typically consists of receiving direction on the more complex projects and on new job duties and priorities

Problem Solving and Decision Making:

• Regularly makes recommendations to management on areas of significance to a channel or function within the firm
• Frequently expected to recommend new solutions to problems, improve existing methods, procedures and services, and generate new ideas
• May review decisions made by other individuals on more routine matters

The successful candidate would possess these skills

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others

The team Deloitte Technology US (DT - US) helps power Deloitte’s success, which serves many of the world’s largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence.

The ~3,000 professionals in DT - US deliver services including:

• Cyber Security
• Technology Support
• Technology & Infrastructure
• Applications
• Relationship Management
• Strategy & Communications
• Project Management
• Financials

Cyber Security Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand.

Areas of focus include:

• Risk & Compliance
• Identity & Access Management
• Data Protection
• Cyber Design
• Incident Response
• Security Architecture
• Business Partnership

Qualifications

Required:

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
• Minimum of 6 years of directly related experience in cloud-based development and security management, including subject matter expertise in the area(s) managed
• Minimum 1 year of people and/or process management experience
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Preferred:

• Hands-on experience at depth with at least one major public cloud platform (AWS, Azure including Azure Resource Manager and Azure Commercial offerings, or GCP) across IaaS, PaaS and SaaS environments, with working knowledge of the others
• Hands-on experience designing both small and large-scale solutions with an emphasis on security and performance
• Solid understanding of Zero Trust architecture and its practical application, including least-privilege and just-in-time access, identity-centric controls, and continuous verification
• Background in general security practices such as identity and access management (IAM), Cloud Access Security Broker (CASB), encryption and key management, multi-factor authentication (MFA), and security information and event management (SIEM)
• Working DevOps experience, sufficient to design and enable shift-left security controls in CI/CD pipelines, including Infrastructure as Code (IaC), automation, orchestration, and containerized workloads
• Knowledge and experience across IT infrastructure with security frameworks and standards such as ISO 27001, NIST, and other relevant security-related regulations
• Experience deploying web and service-based applications in Windows and Linux environments
• Understanding of general design principles for web applications, data lakes, and AI/ML capabilities
• Demonstrated experience developing multi-tier and cross-platform architecture plans, including enterprise workflows and distributed intranet/internet architecture
• Experience with large-scale enterprise cloud projects from ideation through to finished production product
• Experience as an Enterprise Security Architect and/or Systems Engineer, designing cloud frameworks or implementing cloud security
• Hands-on experience with Palo Alto Networks Prisma Cloud and/or Cortex
• Working knowledge of the following capabilities delivered through those platforms: CNAPP – Cloud-Native Application Protection Platform, CSPM – Cloud Security Posture Management, CWPP – Cloud Workload Protection Platform, CIEM – Cloud Infrastructure Entitlement Management, DSPM – Data Security Posture Management, KSPM – Kubernetes Security Posture Management, ASPM – Application Security Posture Management, IaC security scanning and policy-as-code enforcement in CI/CD, WAAS – Web Application and API Security, CDR – Cloud Detection and Response, XDR – Extended Detection and Response (Cortex XDR), SOAR – Security Orchestration, Automation and Response (Cortex XSOAR), XSIAM – Extended Security Intelligence and Automation Management, ASM – Attack Surface Management (Cortex Xpanse)
• Experience implementing microsegmentation and Zero Trust network access (ZTNA) at enterprise scale
• Any of AWS, GCP, Azure or CCSP certification

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 to $243,700. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. EA_ExpHire