Principal Cloud Security Engineer

JDA Software; Town of Texas, Fort Worth (WI, TX); Remote; USD 167,000 - 192,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401k with Matching

Flexible Time Off

Corporate Fitness Program

Legal Plans & more

Job summary

Blue Yonder is seeking a Principal Cloud Security Engineer to design secure cloud architectures and lead Zero Trust initiatives across multi-cloud and on-prem environments. You will implement cloud-native security controls, IAM modernization, and incident response programs.

This role requires 10+ years in cloud security, strong Azure experience, and a track record of integrating security into CI/CD pipelines. Remote US work with competitive salary and benefits.

Qualifications

• 10+ years of cloud and infrastructure security experience.
• Minimum 3+ years with Microsoft Azure or multi-cloud environments.
• Proficiency with security tooling and automation.
• Knowledge of Zero Trust and cloud governance.
• Experience with CI/CD security and DevOps practices.

Responsibilities

• Design and implement secure cloud architectures per NIST/CIS/Zero Trust.
• Deploy Azure security services (Defender for Cloud, Sentinel, Key Vault, Azure Firewall, Azure Policy).
• Develop security controls and IaC alignment with standards.
• Lead Zero Trust adoption including network segmentation and least privilege.
• Advance IAM modernization with MFA and conditional access policies.
• Conduct threat modeling and risk assessments for cloud services.
• Build automated security monitoring and alerting systems.
• Integrate security into CI/CD and secure code deployment practices.
• Respond to security incidents with root-cause analysis and remediation.
• Stay current on threats and influence security strategy and architecture.
• Support continuous compliance (PCI-DSS, ISO 27001, SOC 2) with monitoring.
• Provide guidance on Azure PaaS/IaaS/SaaS deployments.

Skills

Cloud security engineering

Azure / multi-cloud

Security automation

IAM & MFA

Scripting: PowerShell, Python

Terraform / CI/CD security

Threat modeling

CWPP / CNAPP / SIEM

Zero Trust

Tools

Azure CLI

PowerShell

Terraform

Python

Microsoft Defender for Cloud

Sentinel

Key Vault

Azure Policy

Job description

Role: Principal Cloud Security Engineer

Location: US Remote

Synonymous Business Title(s): Principal Security Engineer

Blue Yonder is a global leader in digital supply chain software solutions. We empower businesses to optimize their supply chains with AI-driven insights and innovative solutions. Join us to shape the future of global cyber security.

What You'll Be Doing:

• Design and implement secure cloud architectures following best practices and security frameworks (e.g., NIST, CIS Benchmarks, Zero Trust).
• Deploy and manage Azure-native security services such as Microsoft Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and Azure Policy.
• Develop and enforce cloud-native security controls aligning to industry best practices (Infrastructure as Code) and organizational standards.
• Lead the adoption and execution of Zero Trust principles, including network segmentation, continuous verification, and least privilege access across all environments.
• Drive modernization of Identity and Access Management (IAM) systems, integrating with cloud-native identity providers and enforcing strong authentication policies (e.g., MFA, conditional access).
• Conduct threat modeling and security risk assessments for new and existing cloud services, applications, and infrastructure.
• Build and maintain automated security monitoring and alerting systems, leveraging cloud-native tools to ensure comprehensive visibility.
• Collaborate with cross functional teams to integrate security into CI/CD pipelines and ensure secure code deployment practices.
• Respond to and investigate security incidents across cloud and hybrid environments, providing root cause analysis and driving remediation efforts.
• Stay current with emerging threats and cloud security technologies, influencing security strategy and architecture with industry best practices and innovations.
• Support continuous compliance efforts (e.g., PCI-DSS, ISO 27001, SOC 2) by implementing monitoring and reporting capabilities to adhere to global regulations.
• Provide guidance on engineering decisions for Azure PaaS/IaaS/SaaS deployments.

What We Are Looking For:

Required Qualifications

• 10+ years of experience in cloud and/or infrastructure security, with 3+ years focused on Microsoft Azure or multi-cloud environments.
• Strong expertise in cloud-native security engineering tooling, and identity and access management.
• Experience with scripting or automation (e.g., PowerShell, Python, Azure CLI, Terraform).
• Hands-on experience with SIEM, CSPM (cloud security posture management), cloud workload protection platforms (CWPP), and/or cloud native application protection platforms (CNAPP).
• Familiarity with Zero Trust, least privilege, and cloud security governance models.

Preferred Qualifications

• Experience integrating security into CI/CD pipelines and DevOps workflows.
• Familiarity with hybrid cloud environments and secure connectivity (e.g., Security Service Edge/Secure Access Service Edge).
• Background in incident response and security monitoring in cloud ecosystems.
• Strong understanding of regulatory requirements (e.g., GDPR, HIPAA, FedRAMP) in a cloud context at a global scale.

Salary

The annual salary range for this position is $167,075.96 - $192,000.00 The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.

Benefits

• Comprehensive Medical, Dental and Vision
• 401K with Matching
• Flexible Time Off
• Corporate Fitness Program
• Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more

Values

At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

What do we do?

Blue Yonder is the AI company for supply chain. As the world leader in end-to-end digital supply chain transformation, Blue Yonder offers a unified, AI-driven platform and multi-tier network that empowers businesses to operate sustainably, scale profitably, and delight their customers—all at machine speed. A pioneer in applying AI solutions to the most complicated supply chain challenges, Blue Yonder’s modern innovations and unmatched industry expertise help more than 3,000 retailers, manufacturers, and logistics service providers confidently navigate supply chain complexity and disruption.

Legal

“Blue Yonder” is a trademark or registered trademark of Blue Yonder Group, Inc. Any trade, product or service name referenced in this document using the name “Blue Yonder” is a trademark and/or property of Blue Yonder Group, Inc. Blue Yonder, Inc. - Administrative Office 15059 N Scottsdale Rd Suite 350 Scottsdale, AZ 85254-2666