Cybersecurity Architecture Manager - Cloud Security

Responsible for ensuring the delivery of the cloud security strategy, and for the architecture and implementation of the cloud cybersecurity systems that carry it out, in partnership with US Infrastructure and US Cybersecurity leadership. Establishes and maintains the capabilities required to secure data and applications operating in dynamic cloud computing environments, provides oversight into and integration of security solutions, and monitors security controls to ensure compliance with firm standards. Recruiting for this role ends on 12/7/2026. Work you'll do This role is a key driver in determining the firm's cloud security strategy and roadmap. The Manager sets direction on cloud controls and best practices for the firm's cloud foundations, evaluates new solutions, and develops the supporting elements required to adopt new technologies in a safe and secure manner, including the controls required by data classification and compliance obligations. That partnership with US Infrastructure extends into design and delivery of cloud security solutions, focused primarily on public cloud environments with some responsibility for on-premises environments. The role also partners with Deloitte Global on cyber strategy, keeping US cloud security direction aligned with global priorities and standards. The Manager supports cross-functional cloud teams in advancing capabilities across cloud security architecture, engineering and operations, contributes to the cloud security program and governance agenda, and helps develop strategic relationships with key alliance partners. Responsibilities: Strategy and partnership Act as a key driver in determining the firm's cloud security strategy, technology standards, roadmaps, and practices under the oversight of US Cybersecurity leadership, and contribute to the overall vision and governance of the cloud security programPartner with US Infrastructure to define requirements and deliver cloud security solutions that meet Deloitte policies, primarily across public cloud environments and secondarily on-premisesPartner with Deloitte Global on cyber strategy, aligning US cloud security direction with global standards, initiatives, and prioritiesHelp drive strategic relationships with key alliance partners and technology vendorsEvaluate new solutions and develop the supporting elements required to incorporate new technologies safely and securely, based on data classification and compliance requirementsMonitor cloud security industry trends, developments, and emerging threatsIncorporate business drivers, needs and strategies to address future business and technology needsCommunicate the implications of architectural decisions, issues and plans to business and IT leadership Architecture and engineering Work across cloud teams and business units to define security requirements and design cloud platform solutionsArchitect and design comprehensive solutions that meet business security requirements in support of a given project or capabilityLead cloud security architecture on assigned projects using any Cloud Service Provider (CSP)Ensure the secure design and implementation of SaaS, PaaS, and IaaS technologies that support security initiativesGuide the implementation of new cloud infrastructure methodologies, concepts, and changes to security services in line with business requirements and security guidelinesDesign or evaluate new tools for improving platform availability using automated protection mechanismsWork closely with development teams on Infrastructure as Code, automation, and orchestrationWork in Agile methodology and partner with scrum teams on secure application and infrastructure solution architecture, planning user stories for sprints while addressing requirements and orchestrating security impactEnable shift-left security by embedding automated controls, policy-as-code, and security scanning directly into CI/CD pipelines and developer workflows Controls, operations and governance Manage cloud security processes and supporting toolsValidate security controls to ensure adherence with firm security standardsReview control designs and validate their implementation to confirm they are effectiveCollaborate with cloud engineers to address security risks and drive the implementation of controls across the entire cloud platform lifecycle, providing mitigation recommendationsProvide operational support and participate in Agile teams focused on business unit success Leadership and collaboration Oversee the implementation of cloud security capabilities performed by the US Infrastructure team, which does not report into this role, working across multiple technical disciplines, including developers, subject matter experts, database administrators, system administrators, and system architects, to provide technical direction and confirm that delivered solutions conform to the approved architecture, standards, and control requirementsMentor engineers and architects in modern cloud best practicesProvide technical guidance and foster a collective understanding of data flows and the security issues encountered in cloud applications and servicesDevelop relationships with product teams by helping them leverage compliance and security to drive value for their products and practicesLead others in the resolution of highly sensitive and confidential issues on behalf of the teamAct as a trusted advisor to internal stakeholders and participate in their decision-making process, including presenting alternatives and informationMonitor service standards for the internal teams and business units the role supportsExhibit a high level of professional flexibility, volunteering innovation and new ideas Work Complexity and Independent Judgment: Work is substantially complex and varied, and regularly requires the selection and application of technical and detailed guidelinesIndependent judgment is required to identify, select and apply the most appropriate methods, as well as to interpret precedentSupervision typically consists of receiving direction on the more complex projects and on new job duties and priorities Problem Solving and Decision Making: Regularly makes recommendations to management on areas of significance to a channel or function within the firmFrequently expected to recommend new solutions to problems, improve existing methods, procedures and services, and generate new ideasMay review decisions made by other individuals on more routine matters The successful candidate would possess these skills Ability to work independently and collaborate as part of a teamEffective written and verbal communication skillsMeticulous attention to detail and quality of work productAbility to build and sustain professional relationshipsAbility to lead projects or workstreamsAbility to manage and prioritize multiple tasks in a fast-paced and dynamic environmentStrong interpersonal skills and professional demeanorAbility to meet deadlinesAbility to mentor and provide clear guidance to others The team Deloitte Technology US (DT - US) helps power Deloitte's success, which serves many of the world's largest, most respected organizations. We develop and deploy cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence. The ~3,000 professionals in DT - US deliver services including: Cyber SecurityTechnology SupportTechnology & InfrastructureApplicationsRelationship ManagementStrategy & CommunicationsProject ManagementFinancials Cyber Security Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, the team helps to protect the Deloitte brand. Areas of focus include: Risk & ComplianceIdentity & Access ManagementData ProtectionCyber DesignIncident ResponseSecurity ArchitectureBusiness Partnership Qualifications Required: Bachelor's degree or equivalent in Information Technology, Computer Science, or EngineeringMinimum of 6 years of directly related experience in cloud-based development and security management, including subject matter expertise in the area(s) managedMinimum 1 year of people and/or process management experienceAbility to travel 10%, on average, based on the work you do and the clients and industries/sectors you serveMust be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. Preferred: Hands-on experience at depth with at least one major public cloud platform (AWS, Azure including Azure Resource Manager and Azure Commercial offerings, or GCP) across IaaS, PaaS and SaaS environments, with working knowledge of the othersHands-on experience designing both small and large-scale solutions with an emphasis on security and performanceSolid understanding of Zero Trust architecture and its practical application, including least-privilege and just-in-time access, identity-centric controls, and continuous verificationBackground in general security practices such as identity and access management (IAM), Cloud Access Security Broker (CASB), encryption and key management, multi-factor authentication (MFA), and security information and event management (SIEM)Working DevOps experience, sufficient to design and enable shift-left security controls in CI/CD pipelines, including Infrastructure as Code (IaC), automation, orchestration, and containerized workloadsKnowledge and experience across IT infrastructure with security frameworks and standards such as ISO 27001, NIST, and other relevant security-related regulationsExperience deploying web and service-based applications in Windows and Linux environmentsUnderstanding of general design principles for web applications, data lakes, and AI/ML capabilitiesDemonstrated experience developing multi-tier and cross-platform architecture plans, including enterprise workflows and distributed intranet/internet architectureExperience with large-scale enterprise cloud projects from ideation through to finished production productExperience as an Enterprise Security Architect and/or Systems Engineer, designing cloud frameworks or implementing cloud securityHands-on experience with Palo Alto Networks Prisma Cloud and/or CortexWorking knowledge of the following capabilities delivered through those platforms: CNAPP - Cloud-Native Application Protection Platform, CSPM - Cloud Security Posture Management, CWPP - Cloud Workload Protection Platform, CIEM - Cloud Infrastructure Entitlement Management, DSPM - Data Security Posture Management, KSPM - Kubernetes Security Posture Management, ASPM - Application Security Posture Management, IaC security scanning and policy-as-code enforcement in CI/CD, WAAS - Web Application and API Security, CDR - Cloud Detection and Response, XDR - Extended Detection and Response (Cortex XDR), SOAR - Security Orchestration, Automation and Response (Cortex XSOAR), XSIAM - Extended Security Intelligence and Automation Management, ASM - Attack Surface Management (Cortex Xpanse)Experience implementing microsegmentation and Zero Trust network access (ZTNA) at enterprise scaleAny of AWS, GCP, Azure or CCSP certification The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 to $243,700. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. EA_ExpHire