Cybersecurity Architecture Manager - Cloud Security

Deloitte • Dayton, OH

2d • $118,700 - $243,700

About The Position

The Cybersecurity Architecture Manager is responsible for delivering the firm’s cloud security strategy and overseeing the architecture and implementation of cloud cybersecurity systems, in partnership with US Infrastructure and US Cybersecurity leadership. The role establishes and maintains capabilities to secure data and applications in dynamic cloud environments, integrates and oversees security solutions, and monitors controls for compliance with firm standards.

The Manager helps set the firm’s cloud security strategy, technology standards, roadmaps, and practices. The role focuses primarily on public cloud environments, with some responsibility for on-premises environments, and partners with Deloitte Global to align US direction with global priorities and standards. It supports cloud security architecture, engineering, operations, program governance, and relationships with technology alliance partners.

The position provides technical direction across cloud initiatives and projects, including secure design and implementation of SaaS, PaaS, and IaaS solutions; Infrastructure as Code and automation; and shift-left security controls in CI/CD pipelines. It validates controls, advises on risk mitigation, supports Agile teams, mentors engineers and architects, and collaborates with technical teams and business stakeholders. The role requires independent judgment on complex work and may involve travel averaging 10%. Recruiting for this role ends on December 7, 2026.

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.
• At least 6 years of directly related experience in cloud-based development and security management, including subject matter expertise in the managed area(s).
• At least 1 year of people and/or process management experience.
• Ability to travel an average of 10%, based on the work performed and clients and industries/sectors served.
• Legally authorized to work in the United States without employer sponsorship, now or at any time in the future.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to mentor and provide clear guidance to others.
• Ability to exercise independent judgment in selecting and applying appropriate technical methods and interpreting precedent.

Nice To Haves

• Hands-on depth with at least one major public cloud platform (AWS, Azure—including Azure Resource Manager and Azure Commercial offerings—or GCP) across IaaS, PaaS, and SaaS, with working knowledge of other platforms.
• Hands-on experience designing small- and large-scale solutions emphasizing security and performance.
• Understanding of Zero Trust architecture and practical application, including least-privilege and just-in-time access, identity-centric controls, and continuous verification.
• Background in IAM, CASB, encryption and key management, MFA, and SIEM.
• Working DevOps experience designing and enabling shift-left security controls in CI/CD pipelines, including IaC, automation, orchestration, and containerized workloads.
• Knowledge and experience across IT infrastructure and security frameworks and standards such as ISO 27001, NIST, and relevant security regulations.
• Experience deploying web and service-based applications in Windows and Linux environments.
• Understanding of general design principles for web applications, data lakes, and AI/ML capabilities.
• Demonstrated experience developing multi-tier and cross-platform architecture plans, including enterprise workflows and distributed intranet/internet architecture.
• Experience with large-scale enterprise cloud projects from ideation through production.
• Experience as an Enterprise Security Architect and/or Systems Engineer designing cloud frameworks or implementing cloud security.
• Hands-on experience with Palo Alto Networks Prisma Cloud and/or Cortex.
• Working knowledge of Prisma Cloud and Cortex capabilities, including CNAPP, CSPM, CWPP, CIEM, DSPM, KSPM, ASPM, IaC security scanning and policy-as-code enforcement in CI/CD, WAAS, CDR, XDR, SOAR, XSIAM, and ASM.
• Experience implementing microsegmentation and Zero Trust network access (ZTNA) at enterprise scale.
• AWS, GCP, Azure, or CCSP certification.

Responsibilities

• Drive the firm’s cloud security strategy, technology standards, roadmaps, practices, vision, and governance under US Cybersecurity leadership.
• Partner with US Infrastructure to define requirements and deliver cloud security solutions, primarily for public cloud and secondarily for on-premises environments.
• Partner with Deloitte Global on cyber strategy and align US cloud security direction with global standards, initiatives, and priorities.
• Develop strategic relationships with alliance partners and technology vendors.
• Evaluate new solutions and develop supporting controls for safe adoption based on data classification and compliance requirements.
• Monitor cloud security industry trends, developments, and emerging threats; incorporate business drivers and future technology needs into plans.
• Communicate architectural decisions, issues, and plans to business and IT leadership.
• Work with cloud teams and business units to define security requirements and design cloud platform solutions.
• Architect comprehensive solutions meeting business security requirements and lead cloud security architecture on assigned projects using any Cloud Service Provider.
• Ensure secure design and implementation of SaaS, PaaS, and IaaS technologies supporting security initiatives.
• Guide implementation of cloud infrastructure methodologies, concepts, and changes to security services in line with business requirements and security guidelines.
• Design or evaluate tools to improve platform availability through automated protection mechanisms.
• Work with development teams on Infrastructure as Code, automation, and orchestration.
• Partner with Agile scrum teams on secure application and infrastructure architecture, sprint user stories, requirements, and security impact.
• Enable shift-left security by embedding automated controls, policy-as-code, and security scanning in CI/CD pipelines and developer workflows.
• Manage cloud security processes and supporting tools.
• Validate security controls and review control designs and implementations to ensure effectiveness and adherence to firm standards.
• Collaborate with cloud engineers to address security risks, implement controls throughout the cloud platform lifecycle, and recommend mitigations.
• Provide operational support and participate in Agile teams focused on business unit success.
• Oversee cloud security capabilities delivered by the US Infrastructure team, providing technical direction and confirming conformance to approved architecture, standards, and controls.
• Mentor engineers and architects in modern cloud best practices and provide technical guidance on data flows and security issues in cloud applications and services.
• Develop relationships with product teams and help them use compliance and security to create value.
• Lead resolution of highly sensitive and confidential issues, advise internal stakeholders, present alternatives, and participate in decision-making.
• Monitor service standards for supported internal teams and business units, and contribute innovation and new ideas.
• Make recommendations to management, propose new solutions, improve methods and services, and review decisions on routine matters.

Benefits

• Broad range of employee benefits (specific benefits are not listed).
• Potential eligibility for a discretionary annual incentive award, subject to program rules and individual and organizational performance.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager