Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Job Details The Principal Engineer, Cloud Security is responsible for engineering, implementing, and continuously improving enterprise cloud security capabilities across a complex, multinational, multi-cloud technology environment. The position serves as a senior technical authority for cloud security engineering, cloud-native protection, infrastructure security automation, security posture management, and secure cloud platform integration. The successful candidate will bring extensive hands-on experience with cloud technologies, infrastructure-as-code, cloud-native security services, and enterprise-scale security platform engineering. This role is critical to accelerating secure cloud adoption, reducing exploitable exposure, improving control effectiveness, and modernizing cybersecurity engineering through automation and scalable platform capabilities. The Principal Engineer will partner with Cloud Platform Engineering, Enterprise Architecture, Cyber Defense, IAM, Application Security, and technology teams to embed security into cloud infrastructure and development lifecycles. Key responsibilities 1. Multi-cloud security engineering — 25% Design, engineer, and implement enterprise cloud security capabilities across Azure, AWS, and GCP. Develop reusable security engineering patterns for landing zones, subscriptions, accounts, projects, workloads, and cloud services. Engineer controls for cloud network segmentation, workload isolation, secure service connectivity, and internet exposure reduction. Implement security guardrails using native cloud controls and enterprise security platforms. Partner with cloud platform teams to embed security requirements into standard cloud provisioning and deployment processes. Ensure cloud security architectures support resilience, scalability, operational efficiency, and regulatory obligations. 2. Cloud security posture and workload protection — 25% Engineer and optimize CNAPP, CSPM, CWPP, CIEM, and cloud exposure management capabilities. Develop integrations between cloud security platforms, cloud-native services, enterprise asset inventories, and cyber defense technologies. Establish continuous visibility into cloud misconfigurations, vulnerabilities, identity exposures, and attack paths. Implement risk-based prioritization of exploitable cloud security findings. Develop automated remediation workflows and preventative controls. Validate cloud security platform coverage, data quality, control effectiveness, and detection accuracy. Engineer protections for containers, Kubernetes, serverless services, virtual machines, and managed cloud workloads. 3. Cloud security automation and DevSecOps — 20% Build infrastructure-as-code and policy-as-code solutions using Terraform, Bicep, CloudFormation, OPA, or equivalent technologies. Develop preventative security guardrails embedded into cloud deployment pipelines. Engineer automated security testing, drift detection, configuration validation, and remediation. Integrate cloud security controls into GitHub Actions, Azure DevOps, GitLab, or equivalent CI/CD environments. Develop reusable modules, APIs, and engineering workflows to reduce manual control implementation. Improve cloud security engineering reliability through automated testing, version control, observability, and deployment standards. 4. Cloud-native security architecture and integration — 15% Engineer solutions leveraging Microsoft Defender for Cloud, Azure Policy, AWS Security Hub, AWS Config, AWS Organizations, Google Security Command Center, and related technologies. Develop cloud identity and privileged access security integration patterns with IAM engineering teams. Support secure private connectivity, DNS security, ingress/egress protection, and workload communications. Engineer cloud security telemetry pipelines to support detection, investigation, and incident response. Partner with Application Security to embed workload and software supply chain security requirements. Develop integration patterns for M&A cloud environments, newly onboarded platforms, and third-party cloud services. 5. Technical leadership and operational excellence — 15% Serve as a principal technical advisor to Cloud Security leadership. Establish cloud security engineering standards, reference patterns, technical roadmaps, and reusable capabilities. Lead technical investigations involving complex cloud security failures and systemic risks. Mentor engineers and influence cloud platform architecture decisions. Participate in engineering design reviews and architecture governance. Collaborate with global engineering and operational teams to establish sustainable production support models. Drive continuous improvements based on control performance, incident learnings, and emerging cloud threats. Required qualifications Typically 10+ years of experience in cybersecurity, cloud infrastructure, platform engineering, software engineering, or related technical disciplines. Extensive hands-on engineering experience with Azure, AWS, or GCP, including deep expertise in at least one hyperscaler. Demonstrated experience designing and implementing enterprise cloud security capabilities. Strong knowledge of cloud networking, identity, workload protection, and cloud-native security services. Hands-on experience with Terraform, Bicep, CloudFormation, Python, PowerShell, or comparable technologies. Experience with CNAPP, CSPM, CWPP, CIEM, or cloud exposure management. Strong understanding of CI/CD pipelines, DevSecOps practices, and infrastructure automation. Experience with containers, Kubernetes, serverless technologies, or modern cloud-native workloads. Ability to troubleshoot complex cloud security issues across infrastructure, identity, networking, and application boundaries. Proven ability to deliver production-grade solutions and influence cross-functional engineering teams. Preferred qualifications Deep Microsoft Azure engineering experience, complemented by practical AWS and GCP knowledge. Experience with Wiz, Microsoft Defender for Cloud, Prisma Cloud, Orca Security, or comparable platforms. Experience with Azure Policy, AWS Organizations/SCPs, AWS Config, GCP Organization Policy, and cloud-native guardrails. Knowledge of Azure Landing Zones, AWS Well-Architected Framework, AWS Control Tower, and Google Cloud Architecture Framework. Experience with Kubernetes security, container image scanning, workload identity, and cloud runtime protection. Experience with cloud security in regulated multinational environments. Understanding of NIST CSF, NIST SP 800-53, ISO 27001, HITRUST, and relevant privacy or pharmaceutical regulatory requirements. Experience with M&A integration, cloud tenant onboarding, and complex hybrid-cloud architectures.ed. What Cencora offers We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora Full time Equal Employment Opportunity Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [email protected]. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned Affiliated Companies Affiliated Companies: AmerisourceBergen Services Corporation Cencora is a leading global pharmaceutical solutions company that is committed to improving the lives of people and animals everywhere. We connect manufacturers, providers, and patients to ensure that anyone can get the therapies they need, where and when they need them. We’re a purpose-driven organization, where all of our team members around the world are united in our responsibility to create healthier futures. We work together every day to help our partners bring their innovations to patients worldwide, creating unparalleled access and impact at the center of health. Recruitment scams are on the rise and the intent is to target individuals looking for employment opportunities. To protect yourself, we urge you to be vigilant and follow these guidelines. 1.) Research the Company: Thoroughly research any company before applying or sharing personal information, check their website, read reviews, and verify their legitimacy. 2.) Be Wary of Unrealistic Promises: Exercise caution If a job posting offers high salaries and minimal qualifications. Legitimate jobs will have realistic expectations and provide detailed job requirements. Jobs at Cencora can be found on Cencora.com/careers 3.) Guard Your Personal Information: Only share sensitive information after vetting the employer’s credibility. Avoid sharing your Social Security number, bank account details, or identification documents during the application process. Cencora does not request this information as part of the employment application. 4.) Avoid Upfront Payments: Legitimate employers do not require payment during the hiring process. Be suspicious if you are asked to pay for training materials, processing fees, or background checks before securing a job offer. Cencora will never ask you for payment information during the hiring or onboarding process. 5.) Verify Communication Channels: Scammers often use free email services or chat platforms without providing an official company contact information. Cencora recruiters will have an email address ending in @cencora.com, @alliance-healthcare.net, @alliance-healthcare.co.uk, alliance-healthcare.fr or alliance-healthcare.ro Remember to stay vigilant and informed about common scam tactics to reduce the risk of falling victim to fraudulent employment schemes. If you believe you have encountered a job scam posing as a Cencora opportunity, please report it immediately to: [email protected]

more at Myhrabc.

27 Oct, 2026

Myhrabc

Tosca Engineer II - Quality & Testing (IN)

Middle level
Engineering

APAC &gt +3

Salary not listed

more at Myhrabc.

Tosca Engineer II - Quality &amp; Testing (IN)

Night Shift Transport Porter - Part Time

European Key Account Manager

similar roles.

Senior Security Technician

Business Information Security Officer

Information Security and Compliance Specialist

Low Voltage / Technician Helper

Systems Security Engineer

Information Systems Security Officer

more at Myhrabc.

Tosca Engineer II - Quality &amp; Testing (IN)

Night Shift Transport Porter - Part Time

European Key Account Manager

similar roles.

Senior Security Technician

Business Information Security Officer

Information Security and Compliance Specialist

Low Voltage / Technician Helper

Systems Security Engineer

Information Systems Security Officer

Tosca Engineer II - Quality & Testing (IN)

Tosca Engineer II - Quality & Testing (IN)