{"id":3471222,"url":"https://alion.io/job/cencora-principal-engineer-cloud-security-engineering","title":"Principal Engineer, Cloud Security Engineering","company":{"id":1040788,"name":"Cencora","domain":"cencora.com","url":"https://alion.io/company/cencora","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":137,"ghost_share":0,"stale_share":0.766,"repost_share":0.022,"time_to_fill_p50_days":27,"computed_at":"2026-11-03T05:54:40Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Plano, United States","Conshohocken, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":177000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":565},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"ISO 27001","optional":true},{"name":"NIST CSF","optional":true},{"name":"Orca Security","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-10-29T17:09:21Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-03T06:41:46Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!\nJob Details\nThe Principal Engineer, Cloud Security is responsible for engineering, implementing, and continuously improving enterprise cloud security capabilities across a complex, multinational, multi-cloud technology environment.\nThe position serves as a senior technical authority for cloud security engineering, cloud-native protection, infrastructure security automation, security posture management, and secure cloud platform integration.\nThe successful candidate will bring extensive hands-on experience with cloud technologies, infrastructure-as-code, cloud-native security services, and enterprise-scale security platform engineering.\nThis role is critical to accelerating secure cloud adoption, reducing exploitable exposure, improving control effectiveness, and modernizing cybersecurity engineering through automation and scalable platform capabilities.\nThe Principal Engineer will partner with Cloud Platform Engineering, Enterprise Architecture, Cyber Defense, IAM, Application Security, and technology teams to embed security into cloud infrastructure and development lifecycles.\nKey responsibilities\n1. Multi-cloud security engineering - 25 %\nDesign, engineer, and implement enterprise cloud security capabilities across Azure, AWS, and GCP.\nDevelop reusable security engineering patterns for landing zones, subscriptions, accounts, projects, workloads, and cloud services.\nEngineer controls for cloud network segmentation, workload isolation, secure service connectivity, and internet exposure reduction.\nImplement security guardrails using native cloud controls and enterprise security platforms.\nPartner with cloud platform teams to embed security requirements into standard cloud provisioning and deployment processes.\nEnsure cloud security architectures support resilience, scalability, operational efficiency, and regulatory obligations.\n2. Cloud security posture and workload protection - 25%\nEngineer and optimize CNAPP, CSPM, CWPP, CIEM, and cloud exposure management capabilities.\nDevelop integrations between cloud security platforms, cloud-native services, enterprise asset inventories, and cyber defense technologies.\nEstablish continuous visibility into cloud misconfigurations, vulnerabilities, identity exposures, and attack paths.\nImplement risk-based prioritization of exploitable cloud security findings.\nDevelop automated remediation workflows and preventative controls.\nValidate cloud security platform coverage, data quality, control effectiveness, and detection accuracy.\nEngineer protections for containers, Kubernetes, serverless services, virtual machines, and managed cloud workloads.\n\n3. Cloud security automation and DevSecOps - 20%\nBuild infrastructure-as-code and policy-as-code solutions using Terraform, Bicep, CloudFormation, OPA, or equivalent technologies.\nDevelop preventative security guardrails embedded into cloud deployment pipelines.\nEngineer automated security testing, drift detection, configuration validation, and remediation.\nIntegrate cloud security controls into GitHub Actions, Azure DevOps, GitLab, or equivalent CI/CD environments.\nDevelop reusable modules, APIs, and engineering workflows to reduce manual control implementation.\nImprove cloud security engineering reliability through automated testing, version control, observability, and deployment standards.\n\n4. Cloud-native security architecture and integration - 15%\nEngineer solutions leveraging Microsoft Defender for Cloud, Azure Policy, AWS Security Hub, AWS Config, AWS Organizations, Google Security Command Center, and related technologies.\nDevelop cloud identity and privileged access security integration patterns with IAM engineering teams.\nSupport secure private connectivity, DNS security, ingress/egress protection, and workload communications.\nEngineer cloud security telemetry pipelines to support detection, investigation, and incident response.\nPartner with Application Security to embed workload and software supply chain security requirements.\nDevelop integration patterns for M&A cloud environments, newly onboarded platforms, and third-party cloud services.\n5. Technical leadership and operational excellence - 15%\nServe as a principal technical advisor to Cloud Security leadership.\nEstablish cloud security engineering standards, reference patterns, technical roadmaps, and reusable capabilities.\nLead technical investigations involving complex cloud security failures and systemic risks.\nMentor engineers and influence cloud platform architecture decisions.\nParticipate in engineering design reviews and architecture governance.\nCollaborate with global engineering and operational teams to establish sustainable production support models.\nDrive continuous improvements based on control performance, incident learnings, and emerging cloud threats.\nRequired qualifications\nTypically 10+ years of experience in cybersecurity, cloud infrastructure, platform engineering, software engineering, or related technical disciplines.\nExtensive hands-on engineering experience with Azure, AWS, or GCP, including deep expertise in at least one hyperscaler.\nDemonstrated experience designing and implementing enterprise cloud security capabilities.\nStrong knowledge of cloud networking, identity, workload protection, and cloud-native security services.\nHands-on experience with Terraform, Bicep, CloudFormation, Python, PowerShell, or comparable technologies.\nExperience with CNAPP, CSPM, CWPP, CIEM, or cloud exposure management.\nStrong understanding of CI/CD pipelines, DevSecOps practices, and infrastructure automation.\nExperience with containers, Kubernetes, serverless technologies, or modern cloud-native workloads.\nAbility to troubleshoot complex cloud security issues across infrastructure, identity, networking, and application boundaries.\nProven ability to deliver production-grade solutions and influence cross-functional engineering teams.\nPreferred qualifications\nDeep Microsoft Azure engineering experience, complemented by practical AWS and GCP knowledge.\nExperience with Wiz, Microsoft Defender for Cloud, Prisma Cloud, Orca Security, or comparable platforms.\nExperience with Azure Policy, AWS Organizations/SCPs, AWS Config, GCP Organization Policy, and cloud-native guardrails.\nKnowledge of Azure Landing Zones, AWS Well-Architected Framework, AWS Control Tower, and Google Cloud Architecture Framework.\nExperience with Kubernetes security, container image scanning, workload identity, and cloud runtime protection.\nExperience with cloud security in regulated multinational environments.\nUnderstanding of NIST CSF, NIST SP 800-53, ISO 27001, HITRUST, and relevant privacy or pharmaceutical regulatory requirements.\nExperience with M&A integration, cloud tenant onboarding, and complex hybrid-cloud architectures.ed.\nWhat Cencora offers\nWe provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora\nFull timeEqual Employment Opportunity\nCencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.\nThe company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.\nCencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email . We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned\nAffiliated Companies\nAffiliated Companies: AmerisourceBergen Services Corporation","description_format":"text","description_chars":9236,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Logistics","Wholesale","Pharmaceutical Distribution"],"lifecycle":[{"event":"open","at":"2026-10-29T17:09:21Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":27,"reasons":["conf:4","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/cencora-principal-engineer-cloud-security-engineering","json_url":"https://alion.io/job/cencora-principal-engineer-cloud-security-engineering.json","meta":{"generated_at":"2026-11-03T08:54:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12714,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1040788},"rest":"https://alion.io/mcp/rest/get_company?id=1040788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcencora-principal-engineer-cloud-security-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcencora-principal-engineer-cloud-security-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcencora-principal-engineer-cloud-security-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cencora-principal-engineer-cloud-security-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcencora-principal-engineer-cloud-security-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3471222}},{"tool":"search_jobs","arguments":{"company":"cencora.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3471222},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}