Cloud Security Controls Engineer

Responsibilities

• Automate preventative and detective cloud security controls across AWS, GCP, and Azure using cloud-native services and Open Policy Agent (OPA).
• Design, develop, test, and deploy cloud security controls through the DevOps lifecycle to support secure, scalable, and repeatable delivery.
• Collaborate with security, platform, and engineering teams to embed security controls into cloud environments and development workflows.
• Build and maintain automation, testing, and validation capabilities to improve the effectiveness and reliability of cloud security controls.
• Develop and maintain detection logic and rules to strengthen monitoring and response capabilities across cloud environments.
• Partner with cross-functional teams to troubleshoot control failures and improve implementation quality.

Requirements

• 3–5 years of experience in DevSecOps engineering with a focus on cloud environments (AWS, GCP, or Azure).
• 3+ years of experience with cloud-native development and architecture.
• 3+ years of proficiency with Python for testing, automation, and custom tool development.
• 3+ years of proficiency with Terraform for infrastructure automation.
• 2+ years of hands-on experience with Open Policy Agent (OPA) and policy enforcement.
• 2+ years of experience in detection engineering and detection-as-code practices.
• 2+ years of experience with SIEM query languages such as Splunk SPL.
• Bachelor's degree in Computer Science, Information Technology, or a related IT discipline.
• Ability to work in a hybrid model (minimum 3 days onsite in Dallas, TX).

Preferred Qualifications

• Strong knowledge of cloud security design patterns and secure-by-default engineering practices.
• Experience working in fast-paced, cross-functional environments.
• Ability to deliver technical demonstrations and communicate complex concepts to stakeholders.
• Analytical ability to manage multiple projects and prioritize tasks independently.

Benefits

• Broad range of competitive benefits and rewards.
• Opportunities for professional development, mentorship, and continuous learning.
• Inclusive culture that empowers diverse perspectives and innovation.

About the Company

Deloitte is a leading global provider of professional services, helping clients navigate complex challenges in cybersecurity and digital transformation. Our Cyber Operate Offering provides managed services that simplify complexity, enabling clients to operate with resilience and secure their critical assets.