Anyone with DeployAdmin (HWSecurity) role can deploy a project. Note that you need this role in both the source and target environments.
This is an add-on role to the Project Admin role. A Project Admin with a Deploy Admin role can publish the project to higher environments. A person having only a Deploy Admin role cannot do anything.