Principal Engineer, Cloud Security Engineering

Cencora • Carrollton, TX

9d

About The Position

The Principal Engineer, Cloud Security is responsible for engineering, implementing, and continuously improving enterprise cloud security capabilities across a complex, multinational, multi-cloud technology environment. This senior technical authority focuses on cloud security engineering, cloud-native protection, infrastructure security automation, security posture management, and secure cloud platform integration. The role partners with Cloud Platform Engineering, Enterprise Architecture, Cyber Defense, IAM, Application Security, and technology teams to embed security into cloud infrastructure and development lifecycles, accelerate secure cloud adoption, reduce exploitable exposure, improve control effectiveness, and modernize cybersecurity engineering through automation and scalable platform capabilities.

The role designs and implements security capabilities across Azure, AWS, and GCP; engineers cloud security posture and workload protection; builds infrastructure-as-code, policy-as-code, and DevSecOps controls; integrates cloud-native security architecture and telemetry; and provides technical leadership. It establishes engineering standards, reference patterns, roadmaps, and reusable capabilities, while supporting production operations and continuous improvement.

Requirements

• Typically 10+ years of experience in cybersecurity, cloud infrastructure, platform engineering, software engineering, or related technical disciplines.
• Extensive hands-on engineering experience with Azure, AWS, or GCP, including deep expertise in at least one hyperscaler.
• Demonstrated experience designing and implementing enterprise cloud security capabilities.
• Strong knowledge of cloud networking, identity, workload protection, and cloud-native security services.
• Hands-on experience with Terraform, Bicep, CloudFormation, Python, PowerShell, or comparable technologies.
• Experience with CNAPP, CSPM, CWPP, CIEM, or cloud exposure management.
• Strong understanding of CI/CD pipelines, DevSecOps practices, and infrastructure automation.
• Experience with containers, Kubernetes, serverless technologies, or modern cloud-native workloads.
• Ability to troubleshoot complex cloud security issues across infrastructure, identity, networking, and application boundaries.
• Proven ability to deliver production-grade solutions and influence cross-functional engineering teams.

Nice To Haves

• Deep Microsoft Azure engineering experience, complemented by practical AWS and GCP knowledge.
• Experience with Wiz, Microsoft Defender for Cloud, Prisma Cloud, Orca Security, or comparable platforms.
• Experience with Azure Policy, AWS Organizations/SCPs, AWS Config, GCP Organization Policy, and cloud-native guardrails.
• Knowledge of Azure Landing Zones, AWS Well-Architected Framework, AWS Control Tower, and Google Cloud Architecture Framework.
• Experience with Kubernetes security, container image scanning, workload identity, and cloud runtime protection.
• Experience with cloud security in regulated multinational environments.
• Understanding of NIST CSF, NIST SP 800-53, ISO 27001, HITRUST, and relevant privacy or pharmaceutical regulatory requirements.
• Experience with M&A integration, cloud tenant onboarding, and complex hybrid-cloud architectures.

Responsibilities

• Design, engineer, and implement enterprise cloud security capabilities across Azure, AWS, and GCP.
• Develop reusable security engineering patterns for landing zones, subscriptions, accounts, projects, workloads, and cloud services.
• Engineer controls for cloud network segmentation, workload isolation, secure service connectivity, and reduced internet exposure.
• Implement security guardrails using native cloud controls and enterprise security platforms, and embed security requirements into cloud provisioning and deployment processes.
• Ensure cloud security architectures support resilience, scalability, operational efficiency, and regulatory obligations.
• Engineer and optimize CNAPP, CSPM, CWPP, CIEM, and cloud exposure management capabilities.
• Integrate cloud security platforms with cloud-native services, enterprise asset inventories, and cyber defense technologies.
• Establish continuous visibility into cloud misconfigurations, vulnerabilities, identity exposures, and attack paths; prioritize exploitable findings by risk.
• Develop automated remediation workflows and preventative controls, and validate platform coverage, data quality, control effectiveness, and detection accuracy.
• Engineer protections for containers, Kubernetes, serverless services, virtual machines, and managed cloud workloads.
• Build infrastructure-as-code and policy-as-code solutions using Terraform, Bicep, CloudFormation, OPA, or equivalent technologies.
• Embed preventative security guardrails and automated security testing, drift detection, configuration validation, and remediation into cloud deployment pipelines.
• Integrate cloud security controls into GitHub Actions, Azure DevOps, GitLab, or equivalent CI/CD environments.
• Develop reusable modules, APIs, and engineering workflows to reduce manual control implementation; improve reliability through automated testing, version control, observability, and deployment standards.
• Engineer solutions using Microsoft Defender for Cloud, Azure Policy, AWS Security Hub, AWS Config, AWS Organizations, Google Security Command Center, and related technologies.
• Develop cloud identity and privileged access security integration patterns with IAM engineering teams.
• Support secure private connectivity, DNS security, ingress/egress protection, workload communications, and cloud security telemetry pipelines for detection, investigation, and incident response.
• Partner with Application Security to embed workload and software supply chain security requirements.
• Develop integration patterns for M&A cloud environments, newly onboarded platforms, and third-party cloud services.
• Serve as a principal technical advisor to Cloud Security leadership and establish engineering standards, reference patterns, technical roadmaps, and reusable capabilities.
• Lead technical investigations into complex cloud security failures and systemic risks; mentor engineers and influence cloud platform architecture decisions.
• Participate in engineering design reviews and architecture governance, and collaborate with global engineering and operational teams to establish sustainable production support models.
• Drive continuous improvements based on control performance, incident learnings, and emerging cloud threats.

Benefits

• Medical, dental, and vision care
• Support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave
• Training programs and professional development resources
• Mentorship programs
• Employee resource groups
• Volunteer activities

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed