Cyber Security Architect Jobs at Deloitte with Visa Sponsorship
Deloitte hires Cyber Security Architects across its consulting practices to lead security strategy, architecture design, and risk frameworks for enterprise clients. The firm has a well-established visa sponsorship process, making it a realistic target for international candidates pursuing H-1B, E-3, or immigrant visa pathways.
See All Cyber Security Architect at Deloitte JobsOverview
Showing 5 of 147+ Cyber Security Architect Jobs at Deloitte jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 147+ Cyber Security Architect Jobs at Deloitte
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cyber Security Architect Jobs at Deloitte.
Get Access To All JobsIdentity and Access Management Architect
Reference Code 1872
Country: United States (US)
US Locations: USA - Hermitage; USA - Nashville; USA - Tampa
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
Work you'll do
We are seeking a Senior Manager-level IAM Architect to partner with Senior IAM leadership team to define and drive the technical strategy and architecture for Identity and Access Management (IAM) across the organization. This role combines strategic leadership, hands-on solution design with product owners, and senior level stakeholder engagement, to secure identities, enable business objectives, and improve user experience across digital channels. This individual must have a pulse on the emerging identity technology trends and best practices to coordinate with Product Owners for integrated IAM architectures and roadmaps.
Core Responsibilities
-
Partner with Senior IAM leadership team to define and own the enterprise IAM architecture, strategy, reference patterns, and roadmaps across authentication, authorization, identity lifecycle, privileged access, and account protection.
-
Engage in executive level leadership conversations, translate business goals into IAM requirements, coordinate with IAM product owners on technical feasibility to ensure solutions scale and interoperate across on-premises, cloud, and hybrid environments.
-
Partner with IAM product technical leads to assist with technical design and implementation for authentication (e.g. MFA, SSO, etc), authorization models (e.g. RBAC, ABAC, etc), identity provisioning, lifecycle management, and privileged access controls.
-
Champion innovation with Identity and Access Management tools, evaluate and provide recommendations to product owners for consideration and integration with the existing platform, while balancing security, privacy, and usability.
-
Architect secure integrations between IAM platforms and applications, directories, cloud services, and CI/CD pipelines, set standards and reusable patterns for developers.
-
Partner with IAM Sr. Leadership team and IAM product technical leads to address IAM risk assessments, threat modeling, and remediation strategies, partner with security, risk, and compliance teams to implement controls and measure risk reduction.
-
Partner with IAM product technical leads to oversee incident response activities as they relate to identity compromise, and lead post-incident root-cause analysis and remediation.
-
Drive adoption: create technical guidance, architecture diagrams, and executive-level briefings, mentor architects and senior engineers on IAM best practices.
-
Collaborate with product, engineering, and business leaders to prioritize roadmap items, measure outcomes (security posture, access-related incidents, time-to-provision), and demonstrate business value.
-
Ensure compliance with relevant regulations and internal policies, support audits and attestations related to identity and access controls.
The team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Qualifications
Do you possess the following?:
-
10+ years of IAM experience with progressive technical leadership, experience in a consulting or large enterprise environment preferred.
-
Proven track record designing, delivering, and operating enterprise-scale IAM solutions across cloud and on-prem environments.
-
Deep technical knowledge of authentication/authorization protocols and standards (OAuth2/OIDC, SAML, SCIM, LDAP) and modern IAM architectures.
-
Hands-on experience with at least two major IAM technologies (e.g., Entra ID/Azure AD, Microsoft AD, CyberArk, SailPoint, Ping Identity).
-
Strong stakeholder management and communication skills, able to present technical concepts to executive audiences and translate business needs into technical requirements.
-
Experience leading vendors, technical teams, and cross-functional workstreams to successful outcomes.
-
Advanced degree (MS) or certifications (e.g., CISSP, CISM, SABSA, TOGAF, vendor-specific IAM certs).
-
Experience with zero-trust identity models, identity governance, privileged access management, and modern authentication modalities (passwordless, biometrics, adaptive MFA).
-
Prior experience building IAM programs or working in high-regulation industries (finance, healthcare, government).
-
Balance strategic thinking with the ability to roll up sleeves and deliver technically where needed.
Identity Providers / Directories: Entra ID/Azure AD, Microsoft AD
Identity Governance and PAM: SailPoint, CyberArk
Authentication & Federation: Ping Identity, OAuth2/OIDC, SAML, SCIM
Cloud & DevOps integration: AWS/Azure/GCP identity services, CI/CD tooling
Our culture
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
Recruiting for this role ends on 02/01/2026.
Deloitte Global is required by local law to include a reasonable estimate of the compensation range for this role for individuals applying to work in our (Open Cities Requiring Pay Disclosure) locations. This compensation range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and delivery model. We would not anticipate that the individual hired into this role would land at or near the top end of the range, but such a decision will be dependent on the facts and circumstances of each case. A reasonable estimate of the range is - for individuals applying to work in these locations.
Identity and Access Management Architect
Reference Code 1872
Country: United States (US)
US Locations: USA - Hermitage; USA - Nashville; USA - Tampa
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
Work you'll do
We are seeking a Senior Manager-level IAM Architect to partner with Senior IAM leadership team to define and drive the technical strategy and architecture for Identity and Access Management (IAM) across the organization. This role combines strategic leadership, hands-on solution design with product owners, and senior level stakeholder engagement, to secure identities, enable business objectives, and improve user experience across digital channels. This individual must have a pulse on the emerging identity technology trends and best practices to coordinate with Product Owners for integrated IAM architectures and roadmaps.
Core Responsibilities
-
Partner with Senior IAM leadership team to define and own the enterprise IAM architecture, strategy, reference patterns, and roadmaps across authentication, authorization, identity lifecycle, privileged access, and account protection.
-
Engage in executive level leadership conversations, translate business goals into IAM requirements, coordinate with IAM product owners on technical feasibility to ensure solutions scale and interoperate across on-premises, cloud, and hybrid environments.
-
Partner with IAM product technical leads to assist with technical design and implementation for authentication (e.g. MFA, SSO, etc), authorization models (e.g. RBAC, ABAC, etc), identity provisioning, lifecycle management, and privileged access controls.
-
Champion innovation with Identity and Access Management tools, evaluate and provide recommendations to product owners for consideration and integration with the existing platform, while balancing security, privacy, and usability.
-
Architect secure integrations between IAM platforms and applications, directories, cloud services, and CI/CD pipelines, set standards and reusable patterns for developers.
-
Partner with IAM Sr. Leadership team and IAM product technical leads to address IAM risk assessments, threat modeling, and remediation strategies, partner with security, risk, and compliance teams to implement controls and measure risk reduction.
-
Partner with IAM product technical leads to oversee incident response activities as they relate to identity compromise, and lead post-incident root-cause analysis and remediation.
-
Drive adoption: create technical guidance, architecture diagrams, and executive-level briefings, mentor architects and senior engineers on IAM best practices.
-
Collaborate with product, engineering, and business leaders to prioritize roadmap items, measure outcomes (security posture, access-related incidents, time-to-provision), and demonstrate business value.
-
Ensure compliance with relevant regulations and internal policies, support audits and attestations related to identity and access controls.
The team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Qualifications
Do you possess the following?:
-
10+ years of IAM experience with progressive technical leadership, experience in a consulting or large enterprise environment preferred.
-
Proven track record designing, delivering, and operating enterprise-scale IAM solutions across cloud and on-prem environments.
-
Deep technical knowledge of authentication/authorization protocols and standards (OAuth2/OIDC, SAML, SCIM, LDAP) and modern IAM architectures.
-
Hands-on experience with at least two major IAM technologies (e.g., Entra ID/Azure AD, Microsoft AD, CyberArk, SailPoint, Ping Identity).
-
Strong stakeholder management and communication skills, able to present technical concepts to executive audiences and translate business needs into technical requirements.
-
Experience leading vendors, technical teams, and cross-functional workstreams to successful outcomes.
-
Advanced degree (MS) or certifications (e.g., CISSP, CISM, SABSA, TOGAF, vendor-specific IAM certs).
-
Experience with zero-trust identity models, identity governance, privileged access management, and modern authentication modalities (passwordless, biometrics, adaptive MFA).
-
Prior experience building IAM programs or working in high-regulation industries (finance, healthcare, government).
-
Balance strategic thinking with the ability to roll up sleeves and deliver technically where needed.
Identity Providers / Directories: Entra ID/Azure AD, Microsoft AD
Identity Governance and PAM: SailPoint, CyberArk
Authentication & Federation: Ping Identity, OAuth2/OIDC, SAML, SCIM
Cloud & DevOps integration: AWS/Azure/GCP identity services, CI/CD tooling
Our culture
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
Recruiting for this role ends on 02/01/2026.
Deloitte Global is required by local law to include a reasonable estimate of the compensation range for this role for individuals applying to work in our (Open Cities Requiring Pay Disclosure) locations. This compensation range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and delivery model. We would not anticipate that the individual hired into this role would land at or near the top end of the range, but such a decision will be dependent on the facts and circumstances of each case. A reasonable estimate of the range is - for individuals applying to work in these locations.
See all 147+ Cyber Security Architect at Deloitte jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cyber Security Architect at Deloitte roles.
Get Access To All JobsTips for Finding Cyber Security Architect Jobs at Deloitte Jobs
Align your credentials to Deloitte's framework
Deloitte's Cyber Security Architect roles frequently require certifications like CISSP, TOGAF, or SABSA alongside consulting experience. Ensure your resume maps security architecture skills to client-facing delivery, not just internal IT functions.
Target practice area postings strategically
Deloitte hires Cyber Security Architects across distinct practices, including Government and Public Services, Financial Services, and Risk Advisory. Roles in different practices have different clearance and residency requirements, so filter postings carefully before applying.
Search open Cyber Security Architect roles on Migrate Mate
Migrate Mate filters Deloitte's Cyber Security Architect postings by visa type, so you can immediately see which roles align with your sponsorship eligibility instead of sorting through postings manually.
Clarify sponsorship scope early in interviews
Deloitte's sponsorship decisions are often made at the practice and geography level, not centrally. Ask directly whether the specific team you're interviewing with has approved headcount for visa sponsorship before advancing to offer negotiations.
Prepare for the LCA prevailing wage step
Once Deloitte extends an offer, your employer files a Labor Condition Application with the DOL confirming your offered wage meets prevailing wage requirements for your work location. If you'll be staffed at client sites in multiple states, confirm which work location the LCA will reference.
Cyber Security Architect at Deloitte jobs are hiring across the US. Find yours.
Find Cyber Security Architect at Deloitte JobsFrequently Asked Questions
Does Deloitte sponsor H-1B visas for Cyber Security Architects?
Yes, Deloitte sponsors H-1B visas for Cyber Security Architect roles. Sponsorship approval depends on the specific practice area, office location, and whether the team has approved headcount for international candidates. Roles in practices with high client demand for security architecture work tend to have stronger sponsorship support. Confirming sponsorship eligibility with your recruiter before the offer stage is the most reliable approach.
How do I apply for Cyber Security Architect jobs at Deloitte?
Applications go through Deloitte's careers portal, where you can filter by job function and location. Before applying, check whether the role explicitly mentions visa sponsorship or review Deloitte's general sponsorship policy. Migrate Mate surfaces Deloitte's Cyber Security Architect postings filtered by visa type, which saves significant time identifying sponsorship-eligible openings.
Which visa types does Deloitte commonly use for Cyber Security Architect roles?
Deloitte sponsors H-1B and H-1B1 visas for most Cyber Security Architect hires, along with the E-3 for Australian citizens. For longer-term pathways, Deloitte has sponsored EB-2 and EB-3 Green Card petitions for this role. The visa type used depends on your nationality, current status, and the practice area's sponsorship preferences.
What qualifications does Deloitte expect for Cyber Security Architect roles?
Deloitte typically expects a bachelor's degree or higher in computer science, information security, or a related field, plus several years of hands-on security architecture experience. Industry certifications such as CISSP or TOGAF carry real weight. Consulting experience, particularly in regulated industries like financial services or government, strengthens your candidacy significantly over purely internal enterprise backgrounds.
How do I think about timing when pursuing sponsorship at Deloitte?
H-1B petitions are subject to an annual cap, with USCIS accepting registrations in March for an October 1 start date. If you receive an offer outside that window, Deloitte can explore cap-exempt options or an E-3 if you're Australian. USCIS premium processing is available if you and the employer need a faster decision, typically within 15 business days.
See which Cyber Security Architect at Deloitte employers are hiring and sponsoring visas right now.
Search Cyber Security Architect at Deloitte Jobs