Senior Consultant Cybersecurity Architecture - Cloud Security

Deloitte; Midland (MI); On-site; USD 103,000 - 211,000; Full time

Benefits offered by this job

Discretionary annual incentive program

Job summary

Deloitte is seeking a Senior Consultant focused on cloud security architecture to act as the technical interface for enterprise application-centric micro-segmentation and zero trust service delivery. The role is based onsite in Midland, MI, with travel up to 10% and requires U.S.

work authorization. Responsibilities include designing, implementing, and sustaining zero trust architectures, leading micro-segmentation programs, and collaborating with multiple teams to deliver enterprise-class

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or Engineering.
• Minimum 8 years of technology experience.
• Minimum 4 years in cybersecurity focusing on network security engineering.
• Proficiency in Python for automation and tooling.
• Networking fundamentals across cloud and on-premises infrastructure.
• Legally authorized to work in the United States without sponsorship.
• Travel 0-10% on average.

Responsibilities

• Support the design and sustainment of zero trust architectures.
• Act as SME for application micro-segmentation and zero-trust principles.
• Collaborate with Network, Application, Server, Cloud teams to design and operate micro-segmentation solutions.
• Lead micro-segmentation implementation as part of a multi-year program.
• Identify new service requirements supporting Zero Trust strategy.
• Lead and support troubleshooting for the micro-segmentation service across teams.

Skills

Zero Trust expertise

Application micro-segmentation

Incident/troubleshooting

Cross-team collaboration

Education

Bachelor’s degree in IT/CS/Engineering

Tools

Python

PowerShell

BASH

Palo Alto

Cisco Firewalls

IP Tables

Windows Packet Filtering

VMware

Hyper-V

Wireshark

Illumio

Guardicore

Cisco Secure Workload

Azure

AWS

GCP

Job description

Join Deloitte as a Senior Consultant focused on cloud security architecture, serving as a technical interface and SME for enterprise application-centric micro-segmentation and zero trust service delivery.

Responsibilities

• Support the design, implementation, and sustainment of zero trust architectures to help safeguard critical assets and data against emerging cyber threats.
• Act as subject matter expert for application micro-segmentation and zero-trust principles, methodologies, and technologies.
• Collaborate with Network and Firewall Teams, Application Teams, Server Teams, Cloud Engineering Teams, and others to design, implement, and operate an enterprise-class application-centric micro-segmentation solution.
• Lead micro-segmentation implementation to help protect critical applications as part of a multi-year program.
• Identify new service requirements supporting the organization’s Zero Trust strategy.
• Lead and support troubleshooting for the micro-segmentation service across teams and vendors.

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.
• Minimum 8 years of various technology experience.
• Minimum 4 years related cybersecurity experience focused on network security engineering, including:
  • Firewall policy design
  • Rule management
  • Hands-on experience securing east-west traffic in enterprise environments
• Proficiency in Python for automation and scripting, including building security tooling, policy automation, or infrastructure-as-code workflows.
• Networking fundamentals with hands-on experience across cloud (AWS, Azure, or GCP) and on-premises data center infrastructure, including:
  • VLANs
  • Subnetting
  • Routing protocols
  • Firewall policy
  • East-west traffic segmentation
• Must be legally authorized to work in the United States without employer sponsorship, now or in the future.
• Ability to travel 0-10% on average.

Preferred

• Experience with micro-segmentation platforms such as Illumio, Guardicore, and Cisco Secure Workload.
• Practical application of Zero Trust principles including least-privilege access, identity-aware policy enforcement, and network segmentation strategy.
• Experience deploying, managing, and tuning micro-segmentation security policies.
• Networking knowledge and traffic analysis experience using Wireshark.
• Experience with virtualization technologies such as VMware and Hyper-V.
• Experience with cloud platforms such as Azure, GCP, and/or AWS.
• Understanding application tiering architecture (web, application, database), communication patterns, and application connectivity.
• Experience with Windows Server and Linux operating systems.
• Knowledge of Zero Trust Framework or NIST 800-207 (Zero Trust Architecture).
• Experience working with management, stakeholders, and vendors.
• Familiarity with Infrastructure-as-a-Service (IaaS), Software-Defined Networking (SDN), and containers.
• Experience designing and managing firewalls or other network segmentation tools.
• Experience setting up, configuring, creating policies, and troubleshooting firewalls including Palo Alto, Cisco, Windows Packet Filtering, and IP Tables.
• Strong scripting experience in one or more languages such as PowerShell, Python, or BASH.
• System forensics and investigation skills, including analyzing file system, memory, running processes, network connections, and logs.
• Certifications such as CISSP, GIAC, CCNA, or other related information security certifications.

Technologies

• Python
• AWS, Azure, GCP
• Illumio, Guardicore
• Cisco Secure Workload
• Wireshark
• VMware, Hyper-V
• IaaS, Software-Defined Networking (SDN), Infrastructure-as-a-Service (IaaS)
• Containers
• Windows Packet Filtering, IP Tables
• Palo Alto, Cisco
• PowerShell, BASH
• NIST 800-207, Zero Trust Framework
• CISSP, GIAC, CCNA

Location

• Midland, MI (onsite)

Salary

• USD 102,500 - 210,600 per year

Benefits

• May be eligible for a discretionary annual incentive program, subject to program rules and dependent on individual and organizational performance.