Senior Consultant Cybersecurity Architecture - Cloud Security

Join Deloitte as a Senior Consultant focused on cloud security architecture, serving as a technical interface and SME for enterprise application-centric micro-segmentation and zero trust service delivery.

• Support the design, implementation, and sustainment of zero trust architectures to help safeguard critical assets and data against emerging cyber threats.
• Act as subject matter expert for application micro-segmentation and zero-trust principles, methodologies, and technologies.
• Collaborate with Network and Firewall Teams
  , Application Teams
  , Server Teams
  , Cloud Engineering Teams
  , and others to design, implement, and operate an enterprise-class application-centric micro-segmentation solution.
• Lead micro-segmentation implementation to help protect critical applications as part of a multi-year program
  .
• Identify new service requirements supporting the organization’s Zero Trust strategy
  .
• Lead and support troubleshooting for the micro-segmentation service across teams and vendors.

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
  .
• Minimum 8 years of various technology experience.
• Minimum 4 years related cybersecurity experience focused on network security engineering
  , including:
  • Firewall policy design
  • Rule management
  • Hands-on experience securing east-west traffic in enterprise environments
• Proficiency in Python for automation and scripting, including building security tooling, policy automation, or infrastructure-as-code workflows.
• Networking fundamentals with hands-on experience across cloud (AWS, Azure, or GCP) and on-premises data center infrastructure, including:
  • VLANs
  • Subnetting
  • Routing protocols
  • Firewall policy
  • East-west traffic segmentation
• Must be legally authorized to work in the United States without employer sponsorship, now or in the future.
• Ability to travel 0-10% on average.

• Experience with micro-segmentation platforms such as Illumio
  , Guardicore
  , and Cisco Secure Workload
  .
• Practical application of Zero Trust principles including least-privilege access
  , identity-aware policy enforcement
  , and network segmentation strategy
  .
• Experience deploying, managing, and tuning micro-segmentation security policies.
• Networking knowledge and traffic analysis experience using Wireshark
  .
• Experience with virtualization technologies such as VMware and Hyper-V.
• Experience with cloud platforms such as Azure
  , GCP
  , and/or AWS
  .
• Understanding application tiering architecture (web, application, database), communication patterns, and application connectivity.
• Experience with Windows Server and Linux operating systems.
• Knowledge of Zero Trust Framework or NIST 800-207 (Zero Trust Architecture).
• Experience working with management, stakeholders, and vendors.
• Familiarity with Infrastructure-as-a-Service (IaaS),
  Software-Defined Networking (SDN), and containers
  .
• Experience designing and managing firewalls or other network segmentation tools.
• Experience setting up, configuring, creating policies, and troubleshooting firewalls including Palo Alto
  , Cisco
  , Windows Packet Filtering
  , and IP Tables
  .
• Strong scripting experience in one or more languages such as Power Shell
  , Python
  , or BASH
  .
• System forensics and investigation skills, including analyzing file system, memory, running processes, network connections, and logs.
• Certifications such as CISSP
  , GIAC
  , CCNA
  , or other related information security certifications.

• Python
• AWS, Azure, GCP
• Illumio, Guardicore
• Cisco Secure Workload
• Wireshark
• VMware, Hyper-V
• IaaS, Software-Defined Networking (SDN), Infrastructure-as-a-Service (IaaS)
• Containers
• Windows Packet Filtering, IP Tables
• Palo Alto, Cisco
• Power Shell, BASH
• NIST 800-207, Zero Trust Framework
• CISSP, GIAC, CCNA

• Midland, MI (onsite)

• USD 102, per year

• May be eligible for a discretionary annual incentive program, subject to program rules and dependent on individual and organizational performance.