Identity & access engineering

• Own the engineering behind identity governance, authentication, authorization, privileged access, and lifecycle/joiner-mover-leaver automation.
• Advance a Zero Trust access model across workforce and workload identities.
• Reduce standing privilege and drive toward least-privilege, auditable access at scale.

Product / application security

• Embed security into the SDLC — threat modeling, secure design review, SAST/DAST/SCA, and remediation workflows that developers can actually adopt.
• Partner with Product and Engineering to shift security left while maintaining velocity.
• Establish and track application security posture and risk-reduction outcomes.

Controls, compliance, and regulatory alignment

• Ensure engineered controls map cleanly to Blue Yonder's compliance obligations (ISO 27001, 27701, 22301, 42001; SOC 1 / SOC 2; ITGC) and produce durable, test-ready evidence.
• Support the certification and roadmap ambitions of the business, including public-sector and regulated frameworks (e.g., FedRAMP, CMMC).
• Serve as the engineering authority in audits, customer security reviews, and regulatory conversations — turning control requirements into implemented, attestable engineering.

Cross-functional leadership

• Partner closely with GRC, Security Operations, Product, Platform Engineering, and Customer Trust to align security engineering with enterprise risk and customer commitments.
• Communicate posture, risk, and progress clearly to executive leadership and, when needed, to customers.

What We’re Looking For:

Required Skills:

• 12+ years (10 years+ in cybersecurity, with a substantial portion in security engineering, cloud security, or platform security roles.
• 6+ years leading security engineering teams, including experience leading managers (leader-of-leaders), in a fast-moving SaaS or cloud-native environment.
• Deep, hands-on-adjacent Azure security expertise — you can set architecture direction, review designs, and hold engineering teams to a high technical bar. Working knowledge of a broader multi-cloud estate (AWS / GCP / OCI) expected.
• Demonstrated fluency across the intersection of engineering systems, security controls, and regulatory frameworks — and a track record of bringing clarity and structure where those three collide.
• Strong command of modern security engineering domains: cloud security posture and workload protection, identity and access, application/product security, and secure infrastructure/IaC.
• Experience operating in an audited environment (SOC 2 and/or ISO 27001 or equivalent), with a real understanding of how controls become evidence.
• Excellent executive communication: able to make complex technical and regulatory topics legible to engineers, executives, auditors, and customers alike.

Preferred/Bonus Qualifications:

• Experience supporting or achieving FedRAMP, CMMC, or other regulated/public-sector frameworks.
• Hands-on experience with a mature security tooling stack — e.g., CNAPP/CSPM, EDR, IGA/PAM, DSPM, SIEM, and cloud-native security services (Microsoft Defender / Purview).
• Background in identity governance and Zero Trust at enterprise scale.
• Prior experience standing up or maturing Detection Engineering and/or Threat & Vulnerability Management functions.
• Relevant certifications such as CISSP, CCSP, or Azure security certifications.
• Engineering or software development background earlier in career.

Leadership Attributes We Value:

• Structure-bringer. You walk into ambiguity — overlapping frameworks, tangled ownership, competing priorities — and leave behind clarity, sequencing, and a plan.
• Builder, not just operator. You've built teams and capabilities from an early state, not only run mature ones.
• Translator. You move fluidly between the engineer's whiteboard, the auditor's control matrix, and the executive's risk narrative.
• High bar, high trust. You set demanding standards and develop people to meet them.

The annual salary range for this position is $186,288 - $241,702

The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.

At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes:

• Comprehensive Medical, Dental and Vision

• 401K with Matching

• Flexible Time Off

• Corporate Fitness Program

• A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more

At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Originally posted on Himalayas