Senior Consultant Cybersecurity Architecture - Cloud Security

About the role

Deloitte US is looking for a Senior Consultant Cybersecurity Architecture (Cloud Security) to act as technical interface and subject matter expert for an enterprise-class, application-centric micro-segmentation service. The consultant works with application teams, infrastructure teams and vendors on product integration, deployment, operations and maintenance of critical business applications and workload isolation. Recruitment closes on 11/2/2026.

Key responsibilities

• Assist in designing, implementing and sustaining zero trust architectures to protect critical assets and data.
• Serve as SME for application micro-segmentation and zero-trust principles, methodologies and technologies.
• Collaborate with network, firewall, application, server and cloud engineering teams to design, implement and support the micro-segmentation solution.
• Lead implementation of micro-segmentation within a multi-year program and identify new service requirements for the Zero Trust strategy.
• Lead and support troubleshooting of the micro-segmentation service.

Required profile

• Bachelor's degree or equivalent in Information Technology, Computer Science or Engineering.
• Minimum 8 years of technology experience, including at least 4 years in cyber security focused on network security engineering.
• Hands-on experience securing east-west traffic in enterprise environments, including firewall policy design and rule management.
• Must be legally authorized to work in the United States without employer sponsorship.
• Able to travel 0-10% on average.

Required skills

• Proficiency in Python for automation and scripting, including security tooling, policy automation or infrastructure-as-code workflows.
• Networking fundamentals across cloud (AWS, Azure, GCP) and on-premises environments, including VLANs, subnetting, routing protocols and firewall policy.
• Preferred: micro-segmentation platforms (Illumio, Guardicore, Cisco Secure Workload), Wireshark, VMware/Hyper-V, Azure/GCP/AWS, Windows/Linux, Palo Alto, Cisco, IP Tables, CISSP/GIAC/CCNA, and Zero Trust framework knowledge.