> Markdown version of [/jobs/ext/4011441-cloud-security-controls-engineer](https://www.wearedevelopers.com/jobs/ext/4011441-cloud-security-controls-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Controls Engineer - **Company:** Deloitte T.T.L. - **Location:** Dallas, TX, United States - **Experience:** Experienced - **Salary:** $99,900.0 - $124,900.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Computer Engineering, Software Design Patterns, DevOps, Intrusion Detection and Prevention, Security Information and Event Management, Policy as Code, Google Cloud, Cloud Platform System, Information Technology, Splunk, Serverless Computing - **Published:** October 29, 2026 - **Apply:** https://apply.deloitte.com/en_US/careers/Login?jobId=373363 ## About the Role * Effective written and verbal communication skills * Meticulous attention to detail and quality of work product * Ability to build and sustain professional relationships * Ability to lead projects or workstreams * Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment * Strong interpersonal skills and professional demeanor * Ability to meet deadlines * Ability to provide clear guidance to others, * 3-5 years of experience in DevSecOps engineering with a focus on cloud environments such as AWS, GCP, or Azure, ideally within a security program. * 3+ years of experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure. * 3+ years of proficiency with Python for testing, automation, and custom tool development. * 3+ years of proficiency with Terraform for infrastructure automation and security control deployment. * 3+ years of experience with software testing methodologies and tools. * 3+ years of experience with DevOps tools and practices, including automated build, test, and deployment processes. * 2+ years of hands-on experience with Open Policy Agent (OPA) and policy enforcement. * 2+ years of experience in detection engineering, including detection-as-code practices and development/maintenance of detection rules. * 2+ years of experience with SIEM query languages such as Splunk SPL, and familiarity with rule formats such as YARA. * Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience * Limited immigration sponsorship may be available * Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve * Must be able to start by 8/17/2026 * Must be able to work in a Hybrid model - minimum of 3 days onsite at the client location in Dallas, TX. Preferred * Strong knowledge of cloud security design patterns and secure-by-default engineering practices. * Experience working in fast-paced, cross-functional environments with security, engineering, and platform teams. * Ability to communicate technical concepts clearly and collaborate effectively across stakeholders. * Analytical/ Decision Making Responsibilities * Analytical ability to manage multiple projects and prioritize tasks into manageable work products * Can operate independently or with minimum supervision * Excellent Written and Communication Skills * Ability to deliver technical demonstrations ## Description Are you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Cloud Security Controls Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Talent Model. Project Talent Model (PTM) is a talent model that is tailored specifically for long-term, onsite client service delivery., The Cloud Security Controls Engineer supports the client as a Cloud Security Engineering Pod to support their Cloud Security efforts as an extension of their own team * Automate preventative and detective cloud security controls across AWS, GCP, and Azure using cloud-native services and Open Policy Agent (OPA). * Design, develop, test, and deploy cloud security controls through the DevOps lifecycle to support secure, scalable, and repeatable delivery. * Collaborate with security, platform, and engineering teams to embed security controls into cloud environments and development workflows. * Build and maintain automation, testing, and validation capabilities to improve the effectiveness and reliability of cloud security controls. * Support continuous improvement of cloud control coverage through policy-as-code, detection engineering, and security engineering best practices. * Develop and maintain detection logic and rules to strengthen monitoring and response capabilities across cloud environments. * Partner with cross-functional teams to troubleshoot control failures, improve implementation quality, and support secure cloud operations.