Cloud Security Engineer

Toyota Automated Logistics; Louisville (KY); On-site; USD 130,000 - 185,000; Full time

Benefits offered by this job

Health, Dental, and Vision Insurance

401(k) Retirement Plan with company-m

Vacation / Holiday Pay

Paid Volunteer time off

Tuition Reimbursement

Job summary

Toyota Automated Logistics seeks a Senior Cloud Security & Identity Engineer to help define, enforce, and monitor guardrails for cloud security and identity across Azure and on-premise workloads.

In this senior IC role, you will partner with the Cloud Center of Excellence and SEE to deliver security-ready, compliant systems, provide clear signals to release and operations, and mentor teams on secure delivery practices.

Qualifications

• Bachelor's degree or related technical field
• 4+ years in cloud security, SecOps or security engineering
• Hands-on experience securing cloud workloads in Azure
• Deep knowledge of cloud identity models (managed identities, service principals, RBAC, CA)
• Experience implementing security controls through Infrastructure-as-code
• Familiarity with Azure Policy, Defender for Cloud, Sentinel, Log Analytics
• Understanding of Zero Trust and least privilege
• Experience incident response and resilience validation
• Ability to communicate security expectations clearly
• Security integrated into delivery processes, not retrofitting controls
• AZ-500/SC-300/SC-100 certs or equivalent preferred
• Eligible to work in USA long term without sponsorship

Responsibilities

• Define and evolve cloud security baselines across Azure and On-Prem environments
• Design secure workload identity and access patterns
• Implement policy-as-code guardrails using IaC pipelines
• Monitor security posture with Defender for Cloud, Sentinel, Log Analytics
• Remediate vulnerabilities with engineering and operations
• Provide security readiness signals to Release and Operations
• Validate backup, restore and DR results for operational readiness
• Support incident triage and root-cause analyses
• Tune alerts to reduce noise and highlight high-signal indicators
• Offer practical security guidance to engineers to enable secure delivery
• Track security posture trends and drive timely remediation
• Mentor developers on software security principles
• Ensure security ownership and accountability across teams

Skills

Azure security

Cloud security

SecOps

Identity management

RBAC

Conditional access

Least privilege

Policy-as-code

Defender for Cloud

Sentinel

Log Analytics

Azure Policy

Education

Bachelor's degree in CS/Engineering/IS

Tools

Azure Policy

Defender for Cloud

Sentinel

Log Analytics

Job description

The Senior Cloud Security & Identity Engineer (SecOps) is a senior individual contributor responsible for defining, enforcing, and monitoring cloud security and identity guardrails to ensure cloud workloads are secure, compliant, resilient, and ready for customer usage.

Operating within the Cloud Center of Excellence (CCoE) and in close partnership with Software Excellence & Enablement (SEE), this role builds security into the delivery system through consistent baselines, identity patterns, policy-as-code, and evidence-based verification. The SecOps Engineer supports Release Management and Operations by providing clear security readiness signals, continuous monitoring, and actionable insights.

This role defines guardrails and validates outcomes—it does not replace application ownership or operations responsibility. Success is measured by security posture, reduced risk, readiness without exception, and operational credibility, not by the volume of findings.

Job Functions

• Define, maintain, and evolve cloud security baselines across both Azure and On-Prem environments.
• Design and enforce secure workload identity and access patterns using least privilege principles.
• Implement and maintain policy-as-code guardrails using Azure Policy and Infrastructure-as-Code pipelines.
• Monitor cloud security posture and configure alerts using Defender for Cloud, Sentinel, and Log Analytics.
• Partner with Engineering and Operations to remediate vulnerabilities in a timely and sustainable manner.
• Support Release Readiness, Operational Readiness, and Cloud Activation through objective security evidence.
• Validate backup, restore, and disaster recovery results as part of operational readiness.
• Support security incident triage, investigation, and root-cause analysis for cloud workloads.
• Reduce noise by tuning alerts and focusing on high-signal security indicators.
• Provide clear, practical guidance to engineering teams that enables secure delivery without friction.
• Monitor drift from security standards and drive remediation with clear owners and timelines.
• Provide transparent, factual summaries of cloud security posture, trends, and risks to leadership.
• Build a culture of security awareness and mentor developers and leaders in the principles of software security.

Travel Requirements

• 20% overnight travel (Travel expenses paid by Toyota Automated Logistics)

Required Qualifications And Preferred Skills

• Bachelors Degree in Computer Science, Engineering, Information Systems, or a related technical field; equivalent experience may be considered
• 4+ years Experience in cloud security, SecOps, cloud identity, or security engineering roles
• Strong hands-on experience securing cloud workloads in Azure environments.
• Deep knowledge of cloud identity models, including managed identities, service principals, RBAC, and conditional access.
• Experience implementing security controls through Infrastructure-as-
• Familiarity with Azure Policy, Defender for Cloud, Sentinel, and Log Analytics.
• Understanding of modern cloud security principles such as Zero Trust and least privilege.
• Experience supporting incident response and resilience validation.
• Ability to communicate security expectations clearly and pragmatically.
• Experience embedding security into delivery processes rather than retrofitting controls.
• Certifications such as AZ-500, SC-300, SC-100, or equivalent experience (preferred, not required).
• Must be eligible to work in the USA long term without sponsorship.
• Employees must follow all information security policies, protect confidential data, complete required training, and report any suspected security incidents to support our information security controls.

About Toyota Automated Logistics

Toyota Automated Logistics is your global partner for integrated warehouse automation. Our team combines the talents of Bastian Solutions, Vanderlande's warehousing business and viastore under one brand to deliver scalable systems, intelligent software and life-cycle services.

In addition to exciting work at a growing company, we offer the following benefits:

• Health, Dental, and Vision Insurance
• 401(k) Retirement Plan with a company match
• Vacation / Holiday Pay
• Paid Volunteer time off
• Tuition Reimbursement
• Professional Associations, Conferences and Subscriptions
• Company Meetings & Events

Toyota Automated Logistics does not work with outside recruiting agencies. No solicitation phone calls please.