Cloud Security Engineer: IAM & CSPM | Hybrid Role

Vanguard; Malvern (Chester County); Hybrid; USD 120,000 - 180,000; Full time

Job summary

The Cloud Security Engineer at Vanguard provides intermediate-level technical support for designing, implementing, and maintaining cloud security controls, IAM policies, and security frameworks within AWS environments. This role partners closely with cross-functional teams to strengthen our cloud security posture and protect cloud infrastructure.

Within the Cloud Identity Security team of Enterprise Security & Fraud, you will contribute to vulnerability management, monitoring, access governance,

Qualifications

• Minimum three years related work experience.
• Undergraduate degree in a related field or the equivalent combination of training and experience.

Responsibilities

• Design, implement, deploy, and maintain cloud security solutions and controls in AWS.
• Support and monitor cloud security technologies using monitoring tools and security applications.
• Investigate, troubleshoot, and resolve AWS Cloud Security and IAM incidents and access-related issues.
• Develop and enhance cloud security standards, testing procedures, and vulnerability assessment methodologies.
• Perform security reviews and risk assessments to strengthen compliance posture.
• Collaborate with cross-functional teams to implement secure cloud solutions.

Skills

AWS security

IAM policies

Cloud monitoring

Incident response

Scripting (Python)

CI/CD

Education

Undergraduate degree

Tools

CloudFormation

Terraform

Wiz

Job description

The Cloud Security Engineer at Vanguard provides intermediate-level technical support for designing, implementing, and maintaining cloud security controls, IAM policies, and security frameworks within AWS environments. This role partners closely with cross-functional teams to strengthen our cloud security posture and protect cloud infrastructure.

Within the Cloud Identity Security team of Enterprise Security & Fraud, you will contribute to vulnerability management, monitoring, access governance,