Cloud Security Engineer

Who are we?

Trader Joe's is your favorite neighborhood grocery store! With almost 640 stores nationwide (and growing), we are the place to be. Looking for something delicious and a friendly conversation? At Trader Joe's, you can find both. We love being your first and favorite place to shop.

What do we do?

Like shopping at Trader Joe's? Then, maybe you'll love working with us. We are looking for an experienced Cloud Security Engineer who is looking to do what they'll love! Do you have experience in Could security? Do you love food? If so, read on! We may have the role of a lifetime for you!

Trader Joe's is unlike any place you've ever worked. Trust us on that. The qualified candidate has at least 5+ years of experience in cybersecurity engineering, Cloud security, or infrastructure security, with demonstrated hands-on responsibility for securing enterprise Cloud and hybrid environments, and is a raving fan of the Trader Joe's concept. Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent experience. Relevant certifications such as Microsoft Azure Security Engineer, CCSP, CISSP, or Palo Alto Networks certifications are a plus. This role is based in our Monrovia, CA, and we have an in-office expectation of 5 days a week.

The Information Technology Crew reflects Trader Joe's unique corporate culture through a commitment to quality, service, high performance, responsiveness, and results. The team has worked diligently to improve system stability, resiliency, and security while building trust with stakeholders and establishing a foundation for continued store growth.

Trader Joe's is seeking an experienced and results-driven Cloud Security Engineer to strengthen and continuously mature security across our enterprise Cloud and hybrid technology environments.

This position is responsible for designing, implementing, optimizing, and maintaining Cloud security architecture, controls, and engineering practices that protect critical infrastructure, applications, identities, and data. The role will focus on proactively identifying security risks, improving security posture, and embedding security into Cloud infrastructure and application delivery.

Working closely with Cybersecurity, Cloud Engineering, Infrastructure, Network, Development, DevOps, Architecture, and external technology partners, the Cloud Security Engineer will help establish consistent security standards, automate security controls, and enable secure, scalable Cloud adoption.

The ideal candidate combines strong hands-on Cloud security engineering experience with an understanding of enterprise infrastructure, hybrid architectures, and modern security principles. This individual will help advance our Cloud security maturity through practical engineering solutions, cross-functional collaboration, and continuous improvement.

Primary Duties and Responsibilities:

Cloud Security Engineering and Architecture

• Design, implement, and continuously improve security controls across Microsoft Azure and integrated hybrid Cloud environments, ensuring alignment with enterprise security standards and business requirements.
• Engineer and optimize Cloud security technologies, including Microsoft Defender for Cloud, Palo Alto Networks Prisma Cloud, and Cloud-native security capabilities.
• Establish and maintain secure Cloud configuration standards, policies, and guardrails covering infrastructure, workloads, networking, identity, and data protection.
• Partner with Cloud Engineering and Architecture teams to assess new Cloud services, evaluate security risks, and integrate appropriate security controls into solution designs.
• Support Cloud migration and modernization initiatives by ensuring security, compliance, and operational requirements are addressed throughout the engineering lifecycle.

Cloud Security Posture and Risk Management

• Continuously assess Cloud security posture, identify configuration weaknesses, vulnerabilities, excessive permissions, and potential exposure across Cloud resources and workloads.
• Implement and optimize Cloud Security Posture Management (CSPM), workload protection, and vulnerability management capabilities to improve security visibility and reduce risk.
• Work with engineering and application teams to prioritize remediation activities based on risk, business impact, and security standards.
• Develop automated security assessments, compliance checks, and reporting to measure control effectiveness and identify opportunities for improvement.
• Support security investigations and incident response activities involving Cloud infrastructure, identities, and workloads in collaboration with Cybersecurity Operations and external security partners.

Cloud Identity, Network, and Data Security

• Engineer and strengthen Cloud identity and access security controls, including Microsoft Entra ID integration, privileged access, least privilege, and workload identities.
• Partner with Identity and Infrastructure teams to improve Cloud access governance, permissions management, and secure authentication practices.
• Collaborate with Network and Cloud Engineering teams to design and implement secure Cloud connectivity, segmentation, firewall policies, and network security controls.
• Support the engineering and integration of Cloud security technologies, including Palo Alto Networks Cloud NGFW and Microsoft security capabilities, to strengthen workload and network protection.
• Partner with data and application teams to incorporate appropriate encryption, secrets management, key management, and data protection controls into Cloud solutions.

Security Automation and Secure Engineering Practices

• Integrate security requirements and controls into Infrastructure as Code, CI/CD pipelines, and automated Cloud provisioning processes.
• Collaborate with Cloud Engineering, DevOps, and Platform Engineering teams to establish reusable, secure deployment patterns and standardized security guardrails.
• Develop scripts, automation, and repeatable workflows to improve security configuration, posture assessments, remediation, and operational efficiency.
• Promote security-by-design practices that allow engineering teams to deliver technology consistently and efficiently while maintaining appropriate security controls.
• Identify opportunities to simplify security processes, reduce manual effort, improve engineering consistency, and advance continuous improvement and Kaizen.

Cross-Functional Collaboration and Security Maturity

• Serve as a technical security partner to Cloud Engineering, Infrastructure, Development, Architecture, Operations, and external technology partners.
• Evaluate emerging Cloud security technologies and capabilities, recommending improvements that strengthen security posture and support enterprise technology direction.
• Establish and maintain Cloud security engineering documentation, technical standards, configuration baselines, and implementation procedures.
• Provide technical guidance to engineering teams and assist with complex security design decisions, escalations, and remediation activities.
• Measure and communicate Cloud security risks, engineering improvements, control effectiveness, and remediation progress to Cybersecurity leadership and stakeholders.

Qualifications

• 5+ years of experience in cybersecurity engineering, Cloud security, or infrastructure security, with demonstrated hands-on responsibility for securing enterprise Cloud and hybrid environments.
• Strong technical experience with Microsoft Azure security architecture, Cloud networking, identity integration, infrastructure protection, and secure Cloud configuration.
• Experience implementing and managing Cloud security platforms such as Microsoft Defender for Cloud, Palo Alto Networks Prisma Cloud, or comparable CSPM and workload protection solutions.
• Strong understanding of Cloud security principles, including Zero Trust, least privilege, network segmentation, workload protection, encryption, and identity security.
• Experience with Microsoft Entra ID, privileged access controls, permissions management, and Cloud identity security.
• Working knowledge of Infrastructure as Code, CI/CD pipelines, and automation technologies such as Terraform, PowerShell, Python, or similar tools.
• Experience conducting Cloud security assessments, vulnerability management, risk remediation, and security control validation.
• Understanding of enterprise infrastructure, networking, hybrid Cloud integration, and security frameworks such as NIST, CIS, and applicable compliance requirements.
• Strong analytical, troubleshooting, communication, and collaboration skills, with the ability to work effectively across technical teams and external partners.
• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent experience. Relevant certifications such as Microsoft Azure Security Engineer, CCSP, CISSP, or Palo Alto Networks certifications are a plus.

WHY A QUALIFIED PROFESSIONAL SHOULD PURSUE THIS JOB

If you're passionate about Cloud security engineering, solving complex technical challenges, and helping organizations adopt technology securely, this role offers an opportunity to make a meaningful impact.

You'll work across modern Cloud technologies and enterprise infrastructure, collaborating with talented engineering and security teams to strengthen security, improve automation, and help shape the future of Cloud security at Trader Joe's.

Our IT team is a collaborative, highly skilled group dedicated to aligning technology strategy with business goals. We value ownership, technical excellence, continuous learning, and Kaizen while delivering reliable, secure technology services that support Trader Joe's long-term success.

We want to hear from you!

We get a lot of resumes; so to help us get to know you better, please submit your resume and cover letter. When creating your cover letter, please answer these questions:

• What is your favorite Trader Joe's product and why?
• What makes you uniquely qualified for this position?

Trader Joe's is an equal opportunity employer and is committed to hiring a diverse Crew.