Cloud Security Architect - Senior Consultant at Deloitte Houston, TX

Cloud Security Architect - Senior Consultant Deloitte & Touche LLP is seeking a Cloud Security Architect (Senior Consultant) located in Houston, TX. The role is part of the Cloud Cyber Services team and involves defining and assessing cloud security strategy, architecture, and practices for clients across multiple hyperscalers. Recruiting for this role ends on 12/31/2025. Responsibilities Lead/provide technical guidance and solutioning for the delivery of Cloud Cyber Risk projects in a project manager and/or architect role, overseeing the activities of onsite and offshore engineers and architects across 8 key cyber domains: Governance, Identity, Application Security, PaaS security, Infrastructure security, Security Monitoring, Resilience and Data protection. Assist in business development activities such as defining scope of services, building resource estimates and related pricing, packaging proposals and supporting delivery of proposals for AWS, GCP, Azure and/or Oracle Cloud services. Act as key client point of contact interface, building rapport and trust with the client. Act as a technical specialist in CNAPP, CWPP and CSPM technologies and security risk frameworks relevant to cloud, as well as industry leading benchmarks. Lead the generation of all project deliverables such as assessment reports, system designs/architectures and risk/security recommendations. Maintain strong domain knowledge of multi‑hyperscaler cloud solutions and security concepts and technologies. Assist clients with security frameworks, cloud configuration standards and resolving cloud vulnerabilities. Lead the execution of cloud security engagements during different phases of the lifecycle – assess, design and implementation. Lead engagements to perform technical health checks for cloud platforms/environments prior to broader deployments. Oversee technical support for AWS, GCP, Azure and/or Oracle cyber services and resolve service‑related issues through research, troubleshooting and working with vendors. Conduct cloud security analysis, recommendations and configurations of prospective clients' platforms and environments based on Deloitte's Cloud Cyber Risk Framework. Perform technical health checks for these cloud platforms/environments prior to broader deployments including DevSecOps and CI/CD pipelines. Use leading cyber tooling for cloud such as Wiz and Snyk; support proof of concept and production deployments of these cloud technologies for AWS, GCP, Azure, Oracle, Wiz and/or Snyk. Assist clients with transitions to using cloud services such as tenant setup and service configuration, focused on cloud cyber risk mitigation. Assist clients with deployment of third‑party technologies to secure the cloud platform such as firewall, WAF, PAM and cloud workload protection. Assist clients with configuration and delivery of cloud security and compliance reports. Provide technical support for AWS, Azure, GCP, Oracle, Wiz, Snyk and third‑party security services and resolve service‑related issues through research and troubleshooting. Implement industry‑leading practices around Azure, AWS, GCP, Wiz, Snyk and cloud security services for clients. Design and develop cloud‑specific security policies, standards and procedures (tenant, management group and subscription management, access control, firewall management, auditing, monitoring, incident & event management, data protection, user & administrator account management, SSO, conditional access, password/key management). Troubleshoot system‑level problems in a multi‑vendor, multi‑protocol network environment. Document platform technical issues, analysis, client communication and resolution as part of cyber risk mitigation steps. Execute cloud security engagements during lifecycle stages – assess, design, implementation & post‑implementation reviews. Implement industry‑leading practices around cyber risks and cloud security for clients. Provide internal cloud and devSecOps security technical training to Advisory personnel as needed. Act as a subject matter specialist on cloud cyber risk for the cloud platforms. Contribute to Point‑of‑Views (PoVs) on providing leading practices to clients facing cyber challenges. Contribute to eminence activities, such as whitepapers highlighting cloud security capabilities. Required Qualifications BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Security, Engineering, Information Technology). 4+ years of experience in technical consulting, client problem‑solving, architecting and designing solutions in a consulting role with project leadership and/or architect experience in AWS, GCP, Azure, Oracle, Wiz and/or Snyk; security focus strongly preferred. 2+ years of hands‑on technical experience designing and implementing security solutions for leading cloud service providers across SP‑I models and environments (Public, Private, Hybrid). 2+ years of experience designing cloud security architectures and strategies for enterprises. 2+ years working with Cloud security industry standards such as CSA, ISO/IEC 27017 and NIST CSF. 2+ years working experience with Cloud security technologies/vendors (e.g., IAM, SIEM, IDS) and/or providers (e.g., Okta, CipherCloud, AlertLogic); a big plus. 1+ year working with Cloud orchestration and automation (CI/CD) in single and multi‑tenant environments. 2+ years working with CNAPP, CSPM or CWPP technologies or planning for large‑scale deployments of these technologies. Limited sponsorship opportunities may be available. Additional Requirements Ability to travel up to 80%. Locations include Houston, Dallas, Cleveland, Detroit, St.Louis, Pittsburgh, Boston, Charlotte, Atlanta, Miami, Memphis, Denver, Phoenix, SaltLakeCity, LosAngeles, SanDiego, SanFrancisco, Seattle – must be within reasonable commute and willing to work part‑time in Deloitte and/or client offices. Preferred Qualifications Previous consulting or Big4 experience. Industry or vendor security certifications such as CISSP or other cloud architect domains. Experience with virtualization including security for compute, network, storage, endpoint, application. Experience designing IAM technologies and services. Experience or strong working knowledge of managing enterprise security infrastructure and perimeter security appliances – e.g., firewalls, IPS, WAF, endpoint protection, SIEM and log management technology. Experience with Azure data, analytics, or AI/ML services (Azure SQL, HDInsight, Databricks, Data Factory, Data Lake Storage, Azure Analysis Services, Synapse Analytics, Azure Machine Learning, etc.). Understanding of industry security standards, guidelines and regulatory/compliance requirements related to information security and cloud computing such as ISO27001, ISO27018, NIST CSF, NIST800‑53, PCIDSS, SOC2, HIPAA, PCI, SOX, GLBA. Information for Applicants with a Need for Accommodation The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 to $218,600. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, wherein any award depends on various factors, including, without limitation, individual and organizational performance. Equal Opportunity Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. #J-18808-Ljbffr