Manager - Cloud WAF & Security Automation Engineering, Deloitte Global Technology

This role is for a Manager in Cloud WAF & Security Automation Engineering at Deloitte Global Technology, leading the strategy, engineering, automation, and operational execution of global Web Application Firewall and cloud security automation platforms. The ideal candidate combines strong leadership with deep technical expertise in cloud security, WAF technologies, automation, and DevSecOps.

• Manage engineering for WAF automation, cloud native WAF operations, and security tooling.
• Define and execute the strategic roadmap for WAF automation, cloud-native security controls, and Infrastructure-as-Code maturity.
• Drive operational excellence, scalability, resiliency, and standardization across global WAF deployments.
• Establish engineering standards, governance processes, peer review requirements, and automation best practices.
• Partner with senior leadership to align security automation initiatives with organizational security strategy and business objectives.
• Mentor engineers and technical leads, while fostering a culture of innovation, accountability, and continuous improvement.
• Oversee deployment and management of cloud-native WAF technologies across multi-cloud and hybrid environments.
• Lead engineering efforts supporting solutions such as Akamai, Radware, AWS WAF, Azure WAF, Cloudflare, or similar platforms.
• Ensure secure configuration management, policy tuning, bot mitigation, API protection, and runtime security capabilities.
• Manage onboarding and integration of enterprise applications into the global WAF service.
• Support incident response, threat mitigation, and proactive security improvement initiatives.
• Own and manage all Terraform modules, automation scripts, CI/CD integrations, and Infrastructure-as-Code pipelines supporting the WAF ecosystem.
• Lead automation projects involving provisioning, policy deployment, reporting, alerting, API integrations, and operational workflows.
• Develop scalable automation frameworks to reduce manual effort and improve deployment consistency globally.
• Partner with DevSecOps teams to integrate WAF, Zero Trust and API security controls into CI/CD pipelines.
• Oversee integrations between WAF platforms, SIEMs, ticketing systems, cloud providers, and monitoring platforms.
• Manage large-scale global deployments and operational support models across multiple regions and business units.
• Coordinate project delivery timelines, risk management activities, and stakeholder communications.
• Establish KPI and reporting frameworks for operational health, onboarding metrics, automation adoption, and security posture improvements.
• Ensure documentation, runbooks, standards, and operational procedures remain current and globally aligned.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field
• 8+ years of experience in cybersecurity, network security, cloud security, or infrastructure engineering
• 4+ years of leadership or management experience leading technical engineering or security operations teams
• Deep experience managing enterprise WAF technologies in large-scale environments
• Strong expertise in Terraform and Infrastructure-as-Code methodologies
• Experience building and managing automation frameworks using scripting languages such as Python, PowerShell, Bash, or Go
• Strong understanding of cloud platforms including AWS, Azure, and/or Google Cloud Platform
• Experience integrating security tooling with CI/CD pipelines and DevSecOps workflows
• Knowledge of API security, bot management, cloud-native security controls, and Zero Trust principles
• Experience supporting globally distributed operations and large enterprise environment
• Strong verbal and written communication and stakeholder management skills with the ability to interface with executive leadership
• Certified Information Systems Security Professional (CISSP) (Highly Desired)
• Certified Cloud Security Professional (CCSP) (Nice to Have)
• AWS Certified Security – Specialty (Nice to Have)
• Microsoft Certified: Azure Security Engineer or Architect (Nice to Have)
• Google Professional Cloud Security Engineer (Nice to Have)

• The salary range for this position is $85,000 - $156,000, and individuals may be eligible to participate in our bonus program.
• $4,000 per year for mental health support benefits
• $1,300 flexible benefit spending account
• Firm-wide closures known as 'Deloitte Days'
• Dedicated days for learning (Development and Innovation Days)
• Flexible work arrangements and a hybrid work structure