1 day ago
Carrollton, TX, USAStaff+
Responsibilities
- Design and implement enterprise cloud security capabilities across Azure, AWS, and GCP.
- Develop reusable security patterns and guardrails for cloud accounts, subscriptions, projects, workloads, and services.
- Engineer cloud network segmentation, workload isolation, secure connectivity, exposure reduction, and cloud-native protections.
- Implement and optimize CNAPP, CSPM, CWPP, CIEM, and cloud exposure management capabilities.
- Develop integrations, telemetry pipelines, automated remediation workflows, preventative controls, and risk-based prioritization for cloud security findings.
- Build infrastructure-as-code and policy-as-code solutions and integrate security controls into deployment pipelines.
- Protect containers, Kubernetes, serverless services, virtual machines, and managed cloud workloads.
- Establish cloud security engineering standards, reference architectures, roadmaps, and reusable capabilities.
- Lead complex cloud security investigations, mentor engineers, participate in architecture governance, and influence cross-functional teams.
Requirements
- Typically 10+ years of experience in cybersecurity, cloud infrastructure, platform engineering, software engineering, or related technical disciplines.
- Extensive hands-on experience with Azure, AWS, or GCP, including deep expertise in at least one hyperscaler.
- Demonstrated experience designing and implementing enterprise cloud security capabilities.
- Strong knowledge of cloud networking, identity, workload protection, and cloud-native security services.
- Hands-on experience with Terraform, Bicep, CloudFormation, Python, PowerShell, or comparable technologies.
- Experience with CNAPP, CSPM, CWPP, CIEM, or cloud exposure management.
- Strong understanding of CI/CD pipelines, DevSecOps practices, and infrastructure automation.
- Experience with containers, Kubernetes, serverless technologies, or modern cloud-native workloads.
- Ability to troubleshoot complex cloud security issues across infrastructure, identity, networking, and application boundaries.
- Proven ability to deliver production-grade solutions and influence cross-functional engineering teams.
- Preferred experience with Wiz, Microsoft Defender for Cloud, Prisma Cloud, Orca Security, Azure Policy, AWS Organizations/SCPs, AWS Config, GCP Organization Policy, Azure Landing Zones, AWS Well-Architected Framework, AWS Control Tower, and Google Cloud Architecture Framework.
- Preferred experience with Kubernetes security, container image scanning, workload identity, cloud runtime protection, regulated multinational environments, M&A integration, cloud tenant onboarding, and complex hybrid-cloud architectures.
- Preferred knowledge of NIST CSF, NIST SP 800-53, ISO 27001, HITRUST, and relevant privacy or pharmaceutical regulatory requirements.
Benefits
- Medical, dental, and vision care.
- Wellness resources covering physical, emotional, financial, and social needs.
- Support for working families, potentially including backup dependent care, adoption assistance, infertility coverage, family-building support, behavioral health solutions, paid parental leave, and paid caregiver leave.
- Training programs, professional development resources, mentorship programs, employee resource groups, and volunteer activities.
- Full-time position.
Tech Stack
Categories
About Cencora
Cencora is a global pharmaceutical distributor and services company that links drug manufacturers with pharmacies, hospitals, and other providers, and supports product commercialization and specialty logistics. It earns revenue from wholesale distribution and fee-based services spanning supply chain, market access, and patient-support programs. Formerly AmerisourceBergen, it is a Fortune 10 public company on the NYSE, headquartered in Pennsylvania, serving both human and animal health markets.