Principal Engineer, Cloud Security Engineering

Value Apothecaries; Carrollton (TX); Presencial; USD 140.000 - 185.000; Jornada completa

Descripción de la vacante

Cencora is looking for a Principal Engineer, Cloud Security to lead engineering across Azure, AWS, and GCP. You will shape enterprise cloud security capabilities, guardrails, and automation within a complex multi-cloud environment.

You will partner with Cloud Platform Engineering, Enterprise Architecture, and Cyber Defense to embed security in cloud lifecycles, drive improvements, and accelerate secure cloud adoption. Carrollton, TX-based role with global impact.

Responsabilidades

• Multi-cloud security engineering: Design, engineer, and implement enterprise cloud security capabilities across Azure, AWS, and GCP with patterns for landing zones, accounts, workloads, and services.
• Cloud security posture and workload protection: Implement CNAPP, CSPM, CWPP, and CWEM, ensuring visibility into misconfigurations, vulnerabilities, identity exposures, and attack paths.
• Cloud security automation and DevSecOps: Build IaC and PaaS guardrails; automate testing, drift detection, and remediation in CI/CD pipelines.
• Cloud-native security architecture and integration: Leverage Defender for Cloud, AWS Security Hub, and CSPs; integrate IAM security and private connectivity.
• Technical leadership and operational excellence: Set standards, roadmaps, and governance; mentor engineers and drive secure cloud platform decisions.

Descripción del empleo

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

Job Details

The Principal Engineer, Cloud Security is responsible for engineering, implementing, and continuously improving enterprise cloud security capabilities across a complex, multinational, multi-cloud technology environment.

The position serves as a senior technical authority for cloud security engineering, cloud-native protection, infrastructure security automation, security posture management, and secure cloud platform integration.

The successful candidate will bring extensive hands‑on experience with cloud technologies, infrastructure‑as‑code, cloud‑native security services, and enterprise‑scale security platform engineering.

This role is critical to accelerating secure cloud adoption, reducing exploitable exposure, improving control effectiveness, and modernizing cybersecurity engineering through automation and scalable platform capabilities.

The Principal Engineer will partner with Cloud Platform Engineering, Enterprise Architecture, Cyber Defense, IAM, Application Security, and technology teams to embed security into cloud infrastructure and development lifecycles.

Key responsibilities

1. Multi-cloud security engineering - 25 %

Design, engineer, and implement enterprise cloud security capabilities across Azure, AWS, and GCP. Develop reusable security engineering patterns for landing zones, subscriptions, accounts, projects, workloads, and cloud services. Engineer controls for cloud network segmentation, workload isolation, secure service connectivity, and internet exposure reduction. Implement security guardrails using native cloud controls and enterprise security platforms. Partner with cloud platform teams to embed security requirements into standard cloud provisioning and deployment processes. Ensure cloud security architectures support resilience, scalability, operational efficiency, and regulatory obligations.

2. Cloud security posture and workload protection - 25%

Engineer and optimize CNAPP, CSPM, CWPP, CIEM, and cloud exposure management capabilities. Develop integrations between cloud security platforms, cloud‑native services, enterprise asset inventories, and cyber defense technologies. Establish continuous visibility into cloud misconfigurations, vulnerabilities, identity exposures, and attack paths. Implement risk‑based prioritization of exploitable cloud security findings. Develop automated remediation workflows and preventative controls. Validate cloud security platform coverage, data quality, control effectiveness, and detection accuracy. Engineer protections for containers, Kubernetes, serverless services, virtual machines, and managed cloud workloads.

3. Cloud security automation and DevSecOps - 20%

Build infrastructure‑as‑code and policy‑as‑code solutions using Terraform, Bicep, CloudFormation, OPA, or equivalent technologies. Develop preventative security guardrails embedded into cloud deployment pipelines. Engineer automated security testing, drift detection, configuration validation, and remediation. Integrate cloud security controls into GitHub Actions, Azure DevOps, GitLab, or equivalent CI/CD environments. Develop reusable modules, APIs, and engineering workflows to reduce manual control implementation. Improve cloud security engineering reliability through automated testing, version control, observability, and deployment standards.

4. Cloud-native security architecture and integration - 15%

Engineer solutions leveraging Microsoft Defender for Cloud, Azure Policy, AWS Security Hub, AWS Config, AWS Organizations, Google Security Command Center, and related technologies. Develop cloud identity and privileged access security integration patterns with IAM engineering teams. Support secure private connectivity, DNS security, ingress/egress protection, and workload communications. Engineer cloud security telemetry pipelines to support detection, investigation, and incident response. Partner with Application Security to embed workload and software supply chain security requirements. Develop integration patterns for M&A cloud environments, newly onboarded platforms, and third‑party cloud services.

5. Technical leadership and operational excellence - 15%

Serve as a principal technical advisor to Cloud Security leadership. Establish cloud security engineering standards, reference patterns, technical roadmaps, and reusable capabilities. Lead technical investigations involving complex cloud security failures and systemic risks. Mentor engineers and influence cloud platform architecture decisions. Participate in engineering design reviews and architecture governance. Collaborate with global engineeri