Cyber - GCP Forward Deployed Security Engineer (FDE) - Senior Consultant

Join Deloitte's Cloud Cyber Security practice as a GCP Forward Deployed Engineer, Senior Consultant and help organizations secure Google Cloud Platform (GCP) cloud and artificial intelligence (AI) workloads at scale.

In this hands-on role, you will work directly with client engineering teams to design, build, ship, and operate secure-by-default GCP environments and automated security controls across generative AI services, container and data platforms, infrastructure-as-code, and secure delivery pipelines.

This role is suited for an engineer who enjoys solving complex cloud security challenges, shipping working automation, and driving security outcomes in production environments.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a GCP Forward Deployed Engineer, Senior Consultant on the Cloud Cyber Security team, you will be responsible for...


* Embedding directly within client cloud, platform, and engineering teams to design, build, deploy, ship, and operate automated security controls across GCP environments, from initial design through production ownership, not only assessment and handoff.


* Designing, implementing, and hardening security controls for Google Cloud generative AI and machine learning services, including Gemini AI, Gemini Enterprise Agent Platform, Model Garden, and Model Armor, as well as securing containerized and serverless workloads on Google Kubernetes Engine (GKE) through pod security standards, network policies, Workload Identity Federation (WIF), runtime protection, image scanning, and admission controls.


* Implementing data protection and data loss prevention capabilities using Google Cloud Data Loss Prevention (DLP), Key Management Service (KMS), tokenization and encryption patterns, Security Command Center, Organization Policies, Identity and Access Management (IAM) Policy Analyzer, and Cloud Logging to support continuous monitoring, posture management, automated remediation, and protection across storage, databases, and analytics platforms.


* Writing and maintaining Terraform-based infrastructure-as-code, embedding security guardrails and policy-as-code, developing reusable secure landing zone modules, and engineering security scanning into live developer workflows, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis, secrets scanning, infrastructure-as-code scanning, and artifact integrity.


* Navigating client environments, including legacy projects, landing zone constraints, and production access requirements, while owning deployed security controls in production, tuning performance, responding to control-related issues, leading technical workstreams, and contributing reusable assets, proof of concepts, knowledge sharing, and mentoring to support future engagements and practice development.

A successful candidate would possess these skills:


* Ability to work independently and collaborate as p...