Cloud Security Engineer, Specialist

The Vanguard Group

  • Malvern, Pennsylvania
  • 2 days ago

    Highlights

    Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. 10+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.

    Numbers & Facts

    LocationMalvern, Pennsylvania

    Description

    Responsibilities:

    • Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud.
    • Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.
    • Define authentication, MFA, and access management patterns that improve security and user experience.
    • Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.
    • Develop automation solutions using Okta APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort.
    • Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting.
    • Drive platform engineering best practices including GitHub-based CI/CD deployment models, testing strategies, release management, and configuration standardization.
    • Continuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.
    • Own platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.
    • Participate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues.
    • Lead root cause analysis activities and implement preventative controls to improve platform stability.
    • Establish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators.
    • Support audit readiness through controls, governance practices, documentation, and evidence management.
    • Manage production changes, platform upgrades, vulnerability remediation, and operational support.
    • Evaluate and adopt new capabilities that strengthen security, reliability, and efficiency.
    • Serve as a technical leader and trusted advisor for enterprise identity and modern authentication services.
    • Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.
    • Influence architecture decisions, engineering standards, and platform roadmaps through strong technical expertise and stakeholder engagement.
    • Mentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance.
    • Drive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness.
    • Provides expert-level IT technical leadership that accelerates application onboarding through automation and engineering excellence.
    • Improves platform reliability, resiliency, and security posture.
    • Drives adoption of modern identity capabilities and best practices.
    • Develop team capability through mentoring and technical leadership.
    • Reduces operational risk while improving audit readiness and service quality.

    Qualifications:

    • 10+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.
    • Bachelor's degree or equivalent combination of education and experience.
    • Extensive hands-on experience with Okta Workforce Identity Cloud, AWS.
    • Preferred At least 2 current Okta certifications (e.g., Okta Certified Professional, Administrator, Consultant, Developer)
    • Expert level experience with:
      • SAML 2.0, OIDC/OAuth 2.0, SCIM
      • Okta APIs, MFA, Sign-On Policies/Patterns
      • Identity lifecycle management and federation design
      • CI/CD pipelines, GitHub-based development, delivery, and Python or similar scripting languages
      • Splunk/syslog analysis, ability to troubleshoot complex authentication issues
      • AWS services including Lambda and Secrets Manager
      • Incident management, root cause analysis, and production support
    • Technical leadership and strategic thinking
    • Mentoring and talent development
    • Cross-functional collaboration
    • Executive and stakeholder communication
    • Driving outcomes through ambiguity
    • Incident leadership and operational excellence
    • Continuous improvement and production change leadership
    • Preferred experience with Infrastructure as Code and Policy as Code e.g. Terraform
    • Preferred experience with FastPass & Device Assurance
    • Preferred experience with Directory services

    Special Factors

    Sponsorship

    Vanguard is offering visa sponsorship for this position.

    About Vanguard

    At Vanguard, we don't just have a mission—we're on a mission.

    To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

    How We Work

    Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

    Similar Jobs