Senior Consultant or Manager, Zero Trust Architecture

--

As a Senior Consultant or Manager in our Zero Trust practice, you will be a trusted advisor to Deloitte clients as they modernize how they secure access for their users, devices, applications and data. You will support and lead the design of Zero Trust architectures and roadmaps based on each client's business priorities and day-to-day operations. You'll draw on deep expertise in one or two Zero Trust pillars and a working understanding of how the pillars connect. You will also bring an objective view to technology decisions so clients can make choices that fit their environment.

What will your typical day look like?

No two days look the same. You will balance multiple client engagements and work alongside client security, network and infrastructure leaders. You'll learn their environment, challenge assumptions and help shape the direction of their Zero Trust programs. You will support and lead workshops and architecture discussions, and present recommendations to technical and executive audiences.

Within Deloitte, you will work with specialists across Cyber and Technology & Transformation and bring your expertise to proposals and pursuits. You will contribute to the development of colleagues through coaching, knowledge sharing and technical mentorship. Managers will take on broader coaching and team leadership responsibilities.

About the team

Deloitte's Cyber practice helps organizations across Canada reduce cyber risk and strengthen their security posture in an increasingly complex threat landscape. Our Zero Trust and Network Modernization team works with clients in the public sector, energy, healthcare, defence and other industries to rethink how trust is established and enforced across their environments. We are a collaborative group of architects and consultants with backgrounds in network, identity, cloud and security engineering. We invest in one another through mentorship, knowledge sharing and continuous learning.

Enough about us, let’s talk about you

Experience

• 5+ years of relevant experience in cybersecurity, networking or infrastructure, including experience in a consulting or client-facing role. The level of the role will be determined based on the depth and breadth of the candidate's experience.
• At least 1 to 2 years applying Zero Trust principles within your area of specialization
• Deep expertise in one or two of the five Zero Trust pillars (Identity, Devices, Networks, Applications and Workloads, Data) with a working understanding of the others
• Experience contributing to and influencing security architecture and roadmap decisions with technical and business stakeholders
• Familiarity with recognized frameworks such as the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-207 and the Cybersecurity and Infrastructure Security Agency (CISA) Zero Trust Maturity Model

Areas of Depth (One or Two Expected)

• Identity: identity governance, phishing-resistant authentication, conditional access and privileged access management
• Devices: endpoint management, device posture and endpoint detection and response (EDR)
• Networks: segmentation, Secure Service Edge (SSE), Zero Trust Network Access (ZTNA), Software-Defined Wide Area Network (SD-WAN) and Network Access Control (NAC)
• Applications and Workloads: application access control, Continuous Threat Exposure Management (CTEM) and cloud-native security in Azure, Amazon Web Services (AWS) or Google Cloud
• Data: data classification, data loss prevention (DLP), DSPM and encryption
• Additional area of specialization: AI & AI Security: Agentic Engineering and Architecture, AI SPM, AI Access Security & AI Gateways

Skills and Attributes

• Clear communicator who can explain architecture choices and trade-offs in business terms
• Confident facilitator with technical and executive audiences
• Enjoys mentoring others and sharing knowledge
• Curious and committed to continuous learning

Education and Certifications

• A college diploma in a technical discipline such as network engineering, computer systems technology or information technology. A university degree in a related field (computer science, engineering etc.) is an asset
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP) or the Cloud Security Alliance (CSA) Certificate of Competence in Zero Trust (CCZT) are an asset
• Vendor certifications in your area of specialization are an asset
• Eligibility to obtain a Government of Canada security clearance is an asset

Note:

Note: French language proficiency is an essential skill for candidates applying to our Québec office (Montreal) and considered a value add for our offices in the Atlantic region.

Total Rewards

The salary range for this position is $90,000 - $175,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. On top of our regular paid vacation days, some examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, firm-wide closures known as "Deloitte Days", dedicated days of for learning (known as Development and Innovation Days), flexible work arrangements and a hybrid work structure.