Security Architect Jobs at Deloitte with Visa Sponsorship
Security Architect jobs at Deloitte span risk advisory and cyber practices, where professionals work on enterprise security strategy, cloud architecture, and compliance frameworks for major clients. The company has a consistent track record of sponsoring international talent for this function, covering both nonimmigrant and immigrant visa pathways.
Find Security Architect Jobs at DeloitteOverview
Showing 4 of 7+ Security Architect Jobs at Deloitte
See all Security Architect Jobs at Deloitte
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Architect Jobs at Deloitte.
Get Access To All JobsAre you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Cloud Security Controls Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Talent Model. Project Talent Model (PTM) is a talent model that is tailored specifically for long-term, onsite client service delivery.
Recruitment for this role ends on 8/7/2026.
Work you'll do/Responsibilities
The Cloud Security Controls Engineer supports the client as a Cloud Security Engineering Pod to support their Cloud Security efforts as an extension of their own team.
- Automate preventative and detective cloud security controls across AWS, GCP, and Azure using cloud-native services and Open Policy Agent (OPA).
- Design, develop, test, and deploy cloud security controls through the DevOps lifecycle to support secure, scalable, and repeatable delivery.
- Collaborate with security, platform, and engineering teams to embed security controls into cloud environments and development workflows.
- Build and maintain automation, testing, and validation capabilities to improve the effectiveness and reliability of cloud security controls.
- Support continuous improvement of cloud control coverage through policy-as-code, detection engineering, and security engineering best practices.
- Develop and maintain detection logic and rules to strengthen monitoring and response capabilities across cloud environments.
- Partner with cross-functional teams to troubleshoot control failures, improve implementation quality, and support secure cloud operations.
The successful candidate would possess these skills:
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The Team
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Our Cyber Operate Offering operates clients' critical cyber assets as a fully managed service or working in partnership with clients. Provides talent, leading technologies, and processes to operate client cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.
Qualifications
Required
- 3-5 years of experience in DevSecOps engineering with a focus on cloud environments such as AWS, GCP, or Azure, ideally within a security program.
- 3+ years of experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure.
- 3+ years of proficiency with Python for testing, automation, and custom tool development.
- 3+ years of proficiency with Terraform for infrastructure automation and security control deployment.
- 3+ years of experience with software testing methodologies and tools.
- 3+ years of experience with DevOps tools and practices, including automated build, test, and deployment processes.
- 2+ years of hands-on experience with Open Policy Agent (OPA) and policy enforcement.
- 2+ years of experience in detection engineering, including detection-as-code practices and development/maintenance of detection rules.
- 2+ years of experience with SIEM query languages such as Splunk SPL, and familiarity with rule formats such as YARA.
- Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience.
- Limited immigration sponsorship may be available.
- Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve.
- Must be able to start by 8/17/2026.
- Must be able to work in a Hybrid model - minimum of 3 days onsite at the client location in Dallas, TX.
Preferred
- Strong knowledge of cloud security design patterns and secure-by-default engineering practices.
- Experience working in fast-paced, cross-functional environments with security, engineering, and platform teams.
- Ability to communicate technical concepts clearly and collaborate effectively across stakeholders.
- Analytical/ Decision Making Responsibilities.
- Analytical ability to manage multiple projects and prioritize tasks into manageable work products.
- Can operate independently or with minimum supervision.
- Excellent Written and Communication Skills.
- Ability to deliver technical demonstrations.
The wage range for this role considers the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $99,900 to $124,900.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Are you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Cloud Security Controls Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Talent Model. Project Talent Model (PTM) is a talent model that is tailored specifically for long-term, onsite client service delivery.
Recruitment for this role ends on 8/7/2026.
Work you'll do/Responsibilities
The Cloud Security Controls Engineer supports the client as a Cloud Security Engineering Pod to support their Cloud Security efforts as an extension of their own team.
- Automate preventative and detective cloud security controls across AWS, GCP, and Azure using cloud-native services and Open Policy Agent (OPA).
- Design, develop, test, and deploy cloud security controls through the DevOps lifecycle to support secure, scalable, and repeatable delivery.
- Collaborate with security, platform, and engineering teams to embed security controls into cloud environments and development workflows.
- Build and maintain automation, testing, and validation capabilities to improve the effectiveness and reliability of cloud security controls.
- Support continuous improvement of cloud control coverage through policy-as-code, detection engineering, and security engineering best practices.
- Develop and maintain detection logic and rules to strengthen monitoring and response capabilities across cloud environments.
- Partner with cross-functional teams to troubleshoot control failures, improve implementation quality, and support secure cloud operations.
The successful candidate would possess these skills:
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The Team
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Our Cyber Operate Offering operates clients' critical cyber assets as a fully managed service or working in partnership with clients. Provides talent, leading technologies, and processes to operate client cyber capabilities, including the identity lifecycle, security operations, threat intelligence, application security business transformation, and continuous compliance.
Qualifications
Required
- 3-5 years of experience in DevSecOps engineering with a focus on cloud environments such as AWS, GCP, or Azure, ideally within a security program.
- 3+ years of experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure.
- 3+ years of proficiency with Python for testing, automation, and custom tool development.
- 3+ years of proficiency with Terraform for infrastructure automation and security control deployment.
- 3+ years of experience with software testing methodologies and tools.
- 3+ years of experience with DevOps tools and practices, including automated build, test, and deployment processes.
- 2+ years of hands-on experience with Open Policy Agent (OPA) and policy enforcement.
- 2+ years of experience in detection engineering, including detection-as-code practices and development/maintenance of detection rules.
- 2+ years of experience with SIEM query languages such as Splunk SPL, and familiarity with rule formats such as YARA.
- Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience.
- Limited immigration sponsorship may be available.
- Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve.
- Must be able to start by 8/17/2026.
- Must be able to work in a Hybrid model - minimum of 3 days onsite at the client location in Dallas, TX.
Preferred
- Strong knowledge of cloud security design patterns and secure-by-default engineering practices.
- Experience working in fast-paced, cross-functional environments with security, engineering, and platform teams.
- Ability to communicate technical concepts clearly and collaborate effectively across stakeholders.
- Analytical/ Decision Making Responsibilities.
- Analytical ability to manage multiple projects and prioritize tasks into manageable work products.
- Can operate independently or with minimum supervision.
- Excellent Written and Communication Skills.
- Ability to deliver technical demonstrations.
The wage range for this role considers the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $99,900 to $124,900.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
See all Security Architect Jobs at Deloitte
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Architect Jobs at Deloitte.
Get Access To All JobsTips for Finding Security Architect Jobs at Deloitte
Align your credentials to federal frameworks
Deloitte's security architecture roles frequently support government and regulated-industry clients, so certifications like CISSP, CISM, or SABSA carry real weight. Have these documented and current before you apply, as they often appear as requirements rather than preferences.
Target Deloitte's cyber practice hiring cycles
Deloitte's Cyber Risk Services practice ramps hiring in Q3 and Q4 as client engagements close and new budgets open. Applying in late summer through fall puts you in front of hiring managers when Security Architect headcount decisions are actively being made.
Search open Security Architect roles on Migrate Mate
Use Migrate Mate to filter Deloitte's current Security Architect openings by visa type. This surfaces roles where sponsorship is already confirmed, saving you the step of vetting each position for H-1B or E-3 eligibility yourself.
Clarify your visa category before the offer stage
Deloitte sponsors multiple visa categories including H-1B, H-1B1 visa, and E-3. Australian and Chilean nationals should flag their eligibility early in discussions, since E-3 and H-1B1 can be filed year-round without lottery exposure, which can accelerate your start date.
Prepare for the LCA's prevailing wage tier
Deloitte's Security Architect roles typically fall under SOC codes tied to information security analysts or network architects. DOL prevailing wage levels for these codes in major metro areas like New York or Washington D.C. are substantial, so understanding which wage tier your offer must meet helps you evaluate the offer accurately.
Understand how consulting affects your I-140 timeline
If you're on an H-1B and targeting permanent residence, Deloitte typically sponsors through EB-2 or EB-3 PERM. Consulting firms routinely redeploy employees across client sites, so confirm with your recruiter that your primary work location supports a stable PERM filing before USCIS processing begins.
Frequently Asked Questions
Does Deloitte sponsor H-1B visas for Security Architects?
Yes, Deloitte sponsors H-1B visas for Security Architect roles. The company participates in the annual H-1B lottery each April for cap-subject candidates and also files cap-exempt petitions where eligible. Security architecture is a qualifying specialty occupation given the specific degree and expertise requirements the role demands. If you're already in H-1B visa status with another employer, Deloitte can file an H-1B transfer, allowing you to start before USCIS issues an approval.
How do I apply for Security Architect jobs at Deloitte?
Applications go through Deloitte's careers portal, where Security Architect roles are listed under the Cyber Risk Services and Technology practices. Tailoring your resume to reference security frameworks like NIST, Zero Trust, or cloud security architecture increases visibility with Deloitte's recruiting team. You can also browse current openings filtered by visa sponsorship availability on Migrate Mate, which surfaces Deloitte Security Architect positions where international candidates are actively considered.
Which visa types does Deloitte commonly use for Security Architects?
Deloitte sponsors H-1B, H-1B1 visa, and E-3 visas for nonimmigrant work authorization in this role. H-1B covers most nationalities and requires the annual lottery unless you're transferring from an existing H-1B. H-1B1 is available to Chilean nationals and E-3 to Australian citizens, both of which bypass the lottery. For permanent residence, Deloitte typically sponsors eligible Security Architects through the EB-2 or EB-3 preference categories via the PERM labor certification process.
What qualifications does Deloitte expect for Security Architect candidates?
Most Security Architect postings at Deloitte require a bachelor's degree in computer science, information systems, or a related technical field, which also satisfies the specialty occupation requirement for visa sponsorship purposes. Beyond the degree, Deloitte looks for hands-on experience with security architecture across cloud environments, enterprise networks, or identity frameworks. Industry certifications such as CISSP or CCSP are frequently listed as requirements in roles tied to federal or financial services clients.
How do I time my application if I need H-1B sponsorship?
The H-1B cap-subject filing window opens each April 1 for an October 1 start date. USCIS runs an electronic registration lottery in March, so you need an offer in hand before mid-February to give Deloitte time to register you. If you miss the lottery or are on OPT with expiring work authorization, ask your recruiter whether cap-exempt filing or an E-3 or H-1B1 visa pathway applies to your nationality, as those timelines are substantially shorter.