Cloud Security Controls Engineer

Are you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Cloud Security Controls Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Talent Model. Project Talent Model (PTM) is a talent model that is tailored specifically for long-term, onsite client service delivery.
Recruitment for this role ends on 11/11/2026.
Work you’ll do/Responsibilities
The Cloud Security Controls Engineer supports the client as a Cloud Security Engineering Pod to support their Cloud Security efforts as an extension of their own team
Automate preventative and detective cloud security controls across AWS, GCP, and Azure using cloud-native services and Open Policy Agent (OPA).
Design, develop, test, and deploy cloud security controls through the DevOps lifecycle to support secure, scalable, and repeatable delivery.
Collaborate with security, platform, and engineering teams to embed security controls into cloud environments and development workflows.
Build and maintain automation, testing, and validation capabilities to improve the effectiveness and reliability of cloud security controls.
Support continuous improvement of cloud control coverage through policy-as-code, detection engineering, and security engineering best practices.
Develop and maintain detection logic and rules to strengthen monitoring and response capabilities across cloud environments.
Partner with cross-functional teams to troubleshoot control failures, improve implementation quality, and support secure cloud operations.
The successful candidate would possess these skills:
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others
The Team
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Our Cyber Operate Offering operates clients’ critical cyber assets as a fully managed service or working in partnership with clients. Provides talent, leading technologies, and processes to operate client cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.
Qualifications
Required
3–5 years of experience in DevSecOps engineering with a focus on cloud environments such as AWS, GCP, or Azure, ideally within a security program.
3+ years of experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure.
3+ years of proficiency with Python for testing, automation, and custom tool development.
3+ years of proficiency with Terraform for infrastructure automation and security control deployment.
3+ years of experience with software testing methodologies and tools.
3+ years of experience with DevOps tools and practices, including automated build, test, and deployment processes.
2+ years of hands-on experience with Open Policy Agent (OPA) and policy enforcement.
2+ years of experience in detection engineering, including detection-as-code practices and development/maintenance of detection rules.
2+ years of experience with SIEM query languages such as Splunk SPL, and familiarity with rule formats such as YARA.
Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience
Limited immigration sponsorship may be available
Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
Must be able to start by 8/17/2026
Must be able to work in a Hybrid model – minimum of 3 days onsite at the client location in Dallas, TX.
Preferred
Strong knowledge of cloud security design patterns and secure-by-default engineering practices.

Skills
Python, AWS, Azure, GCP, Terraform

Experience
3-5 yrs