Cloud Security Controls Engineer

Position Summary Are you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Cloud Security Controls Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Talent Model. Project Talent Model (PTM) is a talent model that is tailored specifically for long-term, onsite client service delivery. Recruitment for this role ends on 8/7/2026. Work you’ll do/Responsibilities The Cloud Security Controls Engineer supports the client as a Cloud Security Engineering Pod to support their Cloud Security efforts as an extension of their own team Automate preventative and detective cloud security controls across AWS, GCP, and Azure using cloud-native services and Open Policy Agent (OPA).Design, develop, test, and deploy cloud security controls through the DevOps lifecycle to support secure, scalable, and repeatable delivery.Collaborate with security, platform, and engineering teams to embed security controls into cloud environments and development workflows.Build and maintain automation, testing, and validation capabilities to improve the effectiveness and reliability of cloud security controls.Support continuous improvement of cloud control coverage through policy-as-code, detection engineering, and security engineering best practices.Develop and maintain detection logic and rules to strengthen monitoring and response capabilities across cloud environments.Partner with cross-functional teams to troubleshoot control failures, improve implementation quality, and support secure cloud operations. The successful candidate would possess these skills: Effective written and verbal communication skillsMeticulous attention to detail and quality of work productAbility to build and sustain professional relationshipsAbility to lead projects or workstreamsAbility to manage and prioritize multiple tasks in a fast-paced and dynamic environmentStrong interpersonal skills and professional demeanorAbility to meet deadlinesAbility to provide clear guidance to others The Team Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. Our Cyber Operate Offering operates clients’ critical cyber assets as a fully managed service or working in partnership with clients. Provides talent, leading technologies, and processes to operate client cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance. Qualifications Required 3–5 years of experience in DevSecOps engineering with a focus on cloud environments such as AWS, GCP, or Azure, ideally within a security program.3+ years of experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure.3+ years of proficiency with Python for testing, automation, and custom tool development.3+ years of proficiency with Terraform for infrastructure automation and security control deployment.3+ years of experience with software testing methodologies and tools.3+ years of experience with DevOps tools and practices, including automated build, test, and deployment processes.2+ years of hands-on experience with Open Policy Agent (OPA) and policy enforcement.2+ years of experience in detection engineering, including detection-as-code practices and development/maintenance of detection rules.2+ years of experience with SIEM query languages such as Splunk SPL, and familiarity with rule formats such as YARA.Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experienceLimited immigration sponsorship may be availableAbility to travel 10%, on average, based on the work you do and the clients and industries/sectors you serveMust be able to start by 8/17/2026Must be able to work in a Hybrid model – minimum of 3 days onsite at the client location in Dallas, TX. Preferred Strong knowledge of cloud security design patterns and secure-by-default engineering practices.Experience working in fast-paced, cross-functional environments with security, engineering, and platform teams.Ability to communicate technical concepts clearly and collaborate effectively across stakeholders.Analytical/ Decision Making ResponsibilitiesAnalytical ability to manage multiple projects and prioritize tasks into manageable work productsCan operate independently or with minimum supervisionExcellent Written and Communication SkillsAbility to deliver technical demonstrations The wage range for this role considers the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $99,900 to $124,900. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at View email address on click.appcast.io. Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. BenefitsAt Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you. Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas, and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work. Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more. Professional development From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career. As used in this posting, "Deloitte" means Deloitte Consulting LLP, a subsidiary of Deloitte LLP. Please see for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. Requisition code: 359200 Job ID 359200 Engineering and Product | Engineering Managed Services