Cloud Security Engineer

Responsibilities

• Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and configuration issues
• Design, implement, and improve cloud security controls, including identity and access management, network security, encryption, logging, and monitoring
• Support cloud security architecture reviews for new and existing solutions and provide recommendations aligned to security and compliance requirements
• Investigate cloud security events and findings, analyze root causes, and support remediation activities with engineering and operations teams
• Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field
• Active Secret Clearance
• 2+ years of experience supporting cloud security, cloud engineering, or cloud infrastructure
• Experience implementing or assessing security controls in AWS, GCP, or Azure
• Ability to work onsite in the DMV area up to 5 days a week
• Ability to travel approximately 20%

Preferred Qualifications

• Experience with security frameworks and benchmarks such as NIST, CIS, or ISO
• Experience with scripting or automation using Python, PowerShell, Bash, or Terraform
• Experience with container security, Kubernetes, or DevSecOps practices
• Industry certifications such as AWS Certified Security - Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP

Benefits

• Broad range of employee benefits and rewards
• Opportunities for professional development and continuous learning
• Inclusive culture with mentorship and leadership growth opportunities

About the Company

Deloitte’s Government & Public Services (GPS) practice serves federal, state, and local government clients as well as public higher education institutions. Our Enterprise Security offering embeds security into all aspects of digital transformation, securing technical backbones and enabling secure cloud capabilities.