Senior Security Engineer

Are you an experienced, passionate pioneer in technology who wants to work in a collaborative environment? As an experienced Senior Security Engineer, you will have the ability to share new ideas and collaborate on projects as a consultant without the extensive demands of travel. If so, consider an opportunity with Deloitte under our Project Delivery Talent Model. Project Delivery Model (PDM) is a talent model that is tailored specifically for long-term, onsite client service delivery.

Work you'll do/Responsibilities

As a Senior Security Engineer, you will play a pivotal role in safeguarding the organization's network and infrastructure. Your primary responsibilities include:

Architecture and Standards

• Ensure strict adherence to established architecture standards, frameworks, and technology roadmaps, supporting the organization's long-term strategic objectives.
• Contribute to the ongoing development and improvement of security architecture and best practices.

Change and Release Management

• Follow and enforce best practices for change and release management, ensuring all network and security updates are executed with appropriate controls and documentation.

Service and Incident Management

• Complete and manage service requests assigned to Network Operations, Network Engineering, and Network Security teams.
• Provide advanced troubleshooting for incidents, acting as an escalation point for complex issues across network and security platforms.
• Deliver specialized incident support, including firewall, load balancer (F5), packet capture, log introspection, and LAN/WAN diagnostics.

Security Device Administration

• Administer firewalls, including configuration of rules, dynamic routing, threat protection, patching, upgrades, and routine maintenance.
• Manage Intrusion Prevention Systems (IPS) and related tools, ensuring up-to-date protection and reliable operations.
• Oversee load balancer administration (F5 and others), configure VIPs, pool members, and manage SSL offloading.
• Provide DNS and DHCP administration along with ongoing maintenance and improvements.
• Support SSL and IPSEC VPN solutions, ensuring secure remote access capabilities.
• Administer and support web proxies, URL categorization, and Zscaler ZIA/ZPA platforms.

Communication and Collaboration

• Communicate regularly with Engagement Managers (Directors), project team members, and representatives from various functional and / or technical teams, including escalating any matters that require additional attention and consideration from engagement management
• Independently and collaboratively lead client engagement workstreams focused on improvement, optimization, and transformation of processes including implementing leading practice workflows, addressing deficits in quality, and driving operational outcomes

The Team

AI & Engineering leverages cutting-edge engineering capabilities to build, deploy, and operate integrated/verticalized sector solutions in software, data, AI, network, and hybrid cloud infrastructure. These solutions are powered by engineering for business advantage, transforming mission-critical operations. We enable clients to stay ahead with the latest advancements by transforming engineering teams and modernizing technology & data platforms. Our delivery models are tailored to meet each client's unique requirements.

Our AI & Data practice offers comprehensive solutions for designing, developing, and operating advanced Data and AI platforms, products, insights, and services. We help clients innovate, enhance, and manage their data, AI, and analytics capabilities, ensuring they can grow and scale effectively.

Qualifications

Required

• 8+ years designing/engineering and operating security controls for complex enterprise networks
• 6+ years leading troubleshooting for network/security incidents (packet captures, log analysis, root-cause analysis)
• 6+ years implementing network architecture patterns (subnetting, NAT, ACLs, QoS, redundancy/high availability)
• 5+ years planning and executing device lifecycle work (configuration, patching, upgrades, maintenance) across firewalls/routers/switches/load balancers/VPN/proxies/web filtering
• 4+ years producing clear technical documentation (procedures/runbooks, incident reports, RCA write-ups)
• 3+ years providing escalation support and technical guidance to Tier 1/2 teams and junior engineers
• 3+ years engineering and operating firewalls: Palo Alto, Check Point, Cisco ASA/Firepower
• 3+ years engineering and operating load balancers / ADCs: F5 Networks
• 5+ years engineering and operating switching/routing platforms: Cisco (plus experience with Arista/Aruba/Extreme Networks)
• 2+ years deploying/operating cloud security services: Zscaler ZIA/ZPA
• 5+ years using vendor CLI/management interfaces for configuration, troubleshooting, and change execution across the above platforms
• 5+ years implementing and troubleshooting VPN technologies (SSL VPN, IPsec VPN)
• 5+ years implementing and troubleshooting routing (BGP, OSPF, EIGRP)
• 5+ years implementing Layer 2/3 technologies and controls (VLANs, STP, VTP, link aggregation, ACLs, NAT)
• 3+ years engineering enterprise Wi-Fi (802.11a/b/g/n/ac/ax), authentication (WPA2/3, 802.1X), and RF best practices
• 3+ years implementing/troubleshooting AAA protocols (RADIUS, TACACS+)
• 5+ years working with TLS/SSL for traffic encryption and secure service delivery
• Bachelor's degree, preferably in Computer Science, Information Technology, Computer Engineering, or related IT discipline; or equivalent experience
• Limited immigration sponsorship may be available
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve

Preferred

• Analytical/ Decision Making Responsibilities
• Analytical ability to manage multiple projects and prioritize tasks into manageable work products
• Can operate independently or with minimum supervision
• Excellent Written and Communication Skills
• Ability to deliver technical demonstrations

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $102,500 - $171,250.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Information for applicants with a need for accommodation:

Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Benefits

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas, and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.

Our purpose

Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more.

Professional development

From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

As used in this posting, "Deloitte" means Deloitte Consulting LLP, a subsidiary of Deloitte LLP. Please see for a detailed description of the legal structure of Deloitte LLP and its subsidiaries.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Requisition code: 324057

Job ID 324057