Principal Cloud Security Engineer

Blue Yonder is a global leader in digital supply chain software solutions that uses AI-driven insights to help businesses optimize their supply chains. The Principal Cloud Security Engineer will secure multi-cloud and hybrid environments by designing secure architectures, implementing cloud-native controls, modernizing IAM, applying Zero Trust principles, and integrating security across the cloud lifecycle. The role also involves threat modeling, automated monitoring, incident response, compliance support, and cross-functional collaboration.

Responsibilities:

• Design and implement secure cloud architectures following best practices and security frameworks (e.g., NIST, CIS Benchmarks, Zero Trust)
• Deploy and manage Azure-native security services such as Microsoft Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and Azure Policy
• Develop and enforce cloud-native security controls aligning to industry best practices (Infrastructure as Code) and organizational standards
• Lead the adoption and execution of Zero Trust principles, including network segmentation, continuous verification, and least privilege access across all environments
• Drive modernization of Identity and Access Management (IAM) systems, integrating with cloud-native identity providers and enforcing strong authentication policies (e.g., MFA, conditional access)
• Conduct threat modeling and security risk assessments for new and existing cloud services, applications, and infrastructure
• Build and maintain automated security monitoring and alerting systems, leveraging cloud-native tools to ensure comprehensive visibility
• Collaborate with cross functional teams to integrate security into CI/CD pipelines and ensure secure code deployment practices
• Respond to and investigate security incidents across cloud and hybrid environments, providing root cause analysis and driving remediation efforts
• Stay current with emerging threats and cloud security technologies, influencing security strategy and architecture with industry best practices and innovations
• Support continuous compliance efforts (e.g., PCI-DSS, ISO 27001, SOC 2) by implementing monitoring and reporting capabilities to adhere to global regulations
• Provide guidance on engineering decisions for Azure PaaS/IaaS/SaaS deployments

Requirements:

• 10+ years of experience in cloud and/or infrastructure security, with 3+ years focused on Microsoft Azure or multi-cloud environments
• Strong expertise in cloud-native security engineering tooling, and identity and access management
• Experience with scripting or automation (e.g., PowerShell, Python, Azure CLI, Terraform)
• Hands-on experience with SIEM, CSPM (cloud security posture management), cloud workload protection platforms (CWPP), and/or cloud native application protection platforms (CNAPP)
• Familiarity with Zero Trust, least privilege, and cloud security governance models
• Experience integrating security into CI/CD pipelines and DevOps workflows
• Familiarity with hybrid cloud environments and secure connectivity (e.g., Security Service Edge/Secure Access Service Edge)
• Background in incident response and security monitoring in cloud ecosystems
• Strong understanding of regulatory requirements (e.g., GDPR, HIPAA, FedRAMP) in a cloud context at a global scale