Senior Security Engineer

Are you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Senior Security Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Delivery Talent Model. Project Delivery Model (PDM) is a talent model that is tailored specifically for long-term, onsite client service delivery.

Work you'll do/Responsibilities

As a Senior Security Engineer, you will play a pivotal role in safeguarding the organization's network and infrastructure. Your primary responsibilities include:

Architecture and Standards

• Ensure strict adherence to established architecture standards, frameworks, and technology roadmaps, supporting the organization's long-term strategic objectives.
• Contribute to the ongoing development and improvement of security architecture and best practices.

Change and Release Management

• Follow and enforce best practices for change and release management, ensuring all network and security updates are executed with appropriate controls and documentation.

Service and Incident Management

• Complete and manage service requests assigned to Network Operations, Network Engineering, and Network Security teams.
• Provide advanced troubleshooting for incidents, acting as an escalation point for complex issues across network and security platforms.
• Deliver specialized incident support, including firewall, load balancer (F5), packet capture, log introspection, and LAN/WAN diagnostics.

Security Device Administration

• Administer firewalls, including configuration of rules, dynamic routing, threat protection, patching, upgrades, and routine maintenance.
• Manage Intrusion Prevention Systems (IPS) and related tools, ensuring up-to-date protection and reliable operations.
• Oversee load balancer administration (F5 and others), configure VIPs, pool members, and manage SSL offloading.
• Provide DNS and DHCP administration along with ongoing maintenance and improvements.
• Support SSL and IPSEC VPN solutions, ensuring secure remote access capabilities.
• Administer and support web proxies, URL categorization, and Zscaler ZIA/ZPA platforms.

Communication and Collaboration

• Communicate regularly with Engagement Managers (Directors), project team members, and representatives from various functional and / or technical teams, including escalating any matters that require additional attention and consideration from engagement management
• Independently and collaboratively lead client engagement workstreams focused on improvement, optimization, and transformation of processes including implementing leading practice workflows, addressing deficits in quality, and driving operational outcomes

The Team

AI & Engineering leverages cutting-edge engineering capabilities to build, deploy, and operate integrated/verticalized sector solutions in software, data, AI, network, and hybrid cloud infrastructure. These solutions are powered by engineering for business advantage, transforming mission-critical operations. We enable clients to stay ahead with the latest advancements by transforming engineering teams and modernizing technology & data platforms. Our delivery models are tailored to meet each client's unique requirements.

Our AI & Data practice offers comprehensive solutions for designing, developing, and operating advanced Data and AI platforms, products, insights, and services. We help clients innovate, enhance, and manage their data, AI, and analytics capabilities, ensuring they can grow and scale effectively.

Qualifications

Required

• 8+ years designing/engineering and operating security controls for complex enterprise networks
• 6+ years leading troubleshooting for network/security incidents (packet captures, log analysis, root-cause analysis)
• 6+ years implementing network architecture patterns (subnetting, NAT, ACLs, QoS, redundancy/high availability)
• 5+ years planning and executing device lifecycle work (configuration, patching, upgrades, maintenance) across firewalls/routers/switches/load balancers/VPN/proxies/web filtering
• 4+ years producing clear technical documentation (procedures/runbooks, incident reports, RCA write-ups)
• 3+ years providing escalation support and technical guidance to Tier 1/2 teams and junior engineers
• 3+ years engineering and operating firewalls: Palo Alto, Check Point, Cisco ASA/Firepower
• 3+ years engineering and operating load balancers / ADCs: F5 Networks
• 5+ years engineering and operating switching/routing platforms: Cisco (plus experience with Arista/Aruba/Extreme Networks)
• 2+ years deploying/operating cloud security services: Zscaler ZIA/ZPA
• 5+ years using vendor CLI/management interfaces for configuration, troubleshooting, and change execution across the above platforms
• 5+ years implementing and troubleshooting VPN technologies (SSL VPN, IPsec VPN)
• 5+ years implementing and troubleshooting routing (BGP, OSPF, EIGRP)
• 5+ years implementing Layer 2/3 technologies and controls (VLANs, STP, VTP, link aggregation, ACLs, NAT)
• 3+ years engineering enterprise Wi-Fi (802.11a/b/g/n/ac/ax), authentication (WPA2/3, 802.1X), and RF best practices
• 3+ years implementing/troubleshooting AAA protocols (RADIUS, TACACS+)
• 5+ years working with TLS/SSL for traffic encryption and secure service delivery
• Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience
• Limited immigration sponsorship may be available
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve

Preferred

• Analytical/ Decision Making Responsibilities
• Analytical ability to manage multiple projects and prioritize tasks into manageable work products
• Can operate independently or with minimum supervision
• Excellent Written and Communication Skills
• Ability to deliver technical demonstrations

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $102,500 - $171,250.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Information for applicants with a need for accommodation: