Principal Cloud Security Engineer
About The Position
Blue Yonder is a global leader in digital supply chain software solutions. The Principal Cloud Security Engineer secures the organization’s multi-cloud environment, spanning on-premises infrastructure and public cloud platforms. The role focuses on implementing cloud-native security practices, using infrastructure as code (IaC) to establish consistent and scalable controls, applying Zero Trust principles, and modernizing identity and access management across hybrid environments. The engineer works with Product Development, Cloud Platform, and Infrastructure teams to embed security throughout the cloud lifecycle and promote resilience, visibility, and governance. The position designs and implements secure cloud architectures; deploys Azure-native security services; develops cloud-native security controls; leads Zero Trust adoption; modernizes IAM; conducts threat modeling and risk assessments; builds automated monitoring and alerting; integrates security into CI/CD pipelines; investigates cloud and hybrid security incidents; supports continuous compliance; and advises on Azure PaaS, IaaS, and SaaS deployment decisions.
Requirements
- 10+ years of experience in cloud and/or infrastructure security, with 3+ years focused on Microsoft Azure or multi-cloud environments.
- Strong expertise in cloud-native security engineering tooling and identity and access management.
- Experience with scripting or automation, such as PowerShell, Python, Azure CLI, or Terraform.
- Hands-on experience with SIEM, CSPM, cloud workload protection platforms (CWPP), and/or cloud native application protection platforms (CNAPP).
- Familiarity with Zero Trust, least privilege, and cloud security governance models.
Nice To Haves
- Experience integrating security into CI/CD pipelines and DevOps workflows.
- Familiarity with hybrid cloud environments and secure connectivity, such as Security Service Edge/Secure Access Service Edge.
- Background in incident response and security monitoring in cloud ecosystems.
- Strong understanding of cloud-related regulatory requirements such as GDPR, HIPAA, and FedRAMP at a global scale.
Responsibilities
- Design and implement secure cloud architectures following security frameworks and best practices, including NIST, CIS Benchmarks, and Zero Trust.
- Deploy and manage Azure-native security services, including Microsoft Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and Azure Policy.
- Develop and enforce cloud-native security controls using Infrastructure as Code and organizational standards.
- Lead adoption and execution of Zero Trust principles, including network segmentation, continuous verification, and least-privilege access.
- Modernize Identity and Access Management systems, integrate cloud-native identity providers, and enforce strong authentication policies such as MFA and conditional access.
- Conduct threat modeling and security risk assessments for cloud services, applications, and infrastructure.
- Build and maintain automated security monitoring and alerting systems using cloud-native tools.
- Collaborate with cross-functional teams to integrate security into CI/CD pipelines and ensure secure code deployment practices.
- Respond to and investigate security incidents across cloud and hybrid environments, provide root cause analysis, and drive remediation.
- Stay current with emerging threats and cloud security technologies and influence security strategy and architecture.
- Support continuous compliance with requirements such as PCI-DSS, ISO 27001, and SOC 2 through monitoring and reporting capabilities.
- Provide guidance on engineering decisions for Azure PaaS, IaaS, and SaaS deployments.
Benefits
- Comprehensive medical, dental, and vision coverage.
- 401(k) with matching.
- Flexible time off.
- Corporate fitness program.
- Voluntary benefits, including legal plans, accident and hospital indemnity, and pet insurance.
- Eligibility to participate in either the annual performance bonus or commission program, depending on the nature of the position.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
Education Level
No Education Listed
