Sr Director of Cybersecurity Engineering

Role: Senior Director of Cybersecurity Engineering

Location: Dallas, TX preferred or US Remote

Synonymous Business Title (s): Sr. Director, Security Engineering
Overview:

Blue Yonder is looking for a Senior Director of Cybersecurity Engineering to lead the teams that design, build, and operate the technical security controls protecting our multi-cloud SaaS platform and the supply chains it powers.

This is a builder-leader role at the point where three disciplines meet: engineering systems, security controls, and regulatory expectations. The right leader is deeply fluent in all three and — critically — able to bring clarity and structure across them, translating dense control frameworks and audit obligations into engineering that scales, and translating engineering realities back into terms that satisfy auditors, regulators, and customers.

You will own the roadmap and delivery for Cloud & Infrastructure Security Engineering, Identity & Access Engineering, and Product / Application Security with opportunities for further growth, so you should be someone who can architect for the future without over-building for it today.

This role demands genuine depth in Azure security engineering — not familiarity, but the kind of hands-on-adjacent fluency that lets you set technical direction, review architecture, and hold your teams to a high bar.
What You’ll Do:

Lead and scale the engineering organization

- Own strategy, roadmap, and delivery across Cloud & Infrastructure Security Engineering, Identity & Access Engineering, and Product / Application Security.

- Lead a multi-team organization of managers and senior individual contributors; hire, develop, and retain top security engineering talent in a remote-first model.

- Set clear technical standards, engineering practices, and outcomes; build the operating cadence, metrics, and prioritization discipline that let the teams ship reliably.

- Architect the organization to absorb adjacent functions (e.g., Detection Engineering, Threat & Vulnerability Management) over time without disruption.

Cloud & infrastructure security engineering

- Set the technical direction for securing Blue Yonder 's Azure-centered multi-cloud environment (Azure primary; AWS, GCP, and OCI in scope).

- Drive secure-by-default patterns, guardrails, and platform-level controls across network, compute, runtime, data, and identity layers.

- Oversee cloud security posture management, workload protection, secrets and key management, and infrastructure-as-code security.

Identity & access engineering

- Own the engineering behind identity governance, authentication, authorization, privileged access, and lifecycle/joiner-mover-leaver automation.

- Advance a Zero Trust access model across workforce and workload identities.

- Reduce standing privilege and drive toward least-privilege, auditable access at scale.

Product / application security

- Embed security into the SDLC — threat modeling, secure design review, SAST/DAST/SCA, and remediation workflows that developers can actually adopt.

- Partner with Product and Engineering to shift security left while maintaining velocity.

- Establish and track application security posture and risk-reduction outcomes.

Controls, compliance, and regulatory alignment

- Ensure engineered controls map cleanly to Blue Yonder 's compliance obligations (ISO 27001, 27701, 22301, 42001; SOC 1 / SOC 2; ITGC) and produce durable, test-ready evidence.

- Support the certification and roadmap ambitions of the business, including public-sector and regulated frameworks (e.g., FedRAMP, CMMC).

- Serve as the engineering authority in audits, customer security reviews, and regulatory conversations — turning control requirements into implemented, attestable engineering.

Cross-functional leadership

- Partner closely with GRC, Security Operations, Product, Platform Engineering, and Customer Trust to align security engineering with enterprise risk and customer commitments.

- Commun