Cloud Security Engineer — IAM, Okta & Automation

Vanguard Group; Malvern (Chester County); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Visa sponsorship

Job summary

Vanguard in Malvern, PA is seeking an experienced Identity Security Engineer to design and implement enterprise identity solutions with Okta Workforce Identity Cloud. You will lead onboarding using SAML, OIDC, and SCIM, ensuring secure authentication, MFA, and lifecycle management across cloud environments.

You will partner with cloud and platform teams to automate operations, drive CI/CD practices, and strengthen platform resiliency, governance, and reporting.

Qualifications

• Extensive experience with enterprise identity and access management across large-scale services.
• Hands-on with cloud security engineering and IAM design patterns.
• Strong knowledge of SAML, OIDC/OAuth, SCIM, and federation.
• Proven ability to lead technical initiatives and drive automation using CI/CD and GitHub.

Responsibilities

• Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud services.
• Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.
• Ensure authentication, MFA, and access management patterns are followed; improve security and user experience.
• Partner with cloud and platform teams to integrate identity controls across platforms and clouds.
• Develop automation using APIs, scripts, workflows, and CI/CD pipelines to scale and reduce manual effort.
• Automate operational processes, governance controls, onboarding, and compliance reporting.
• Champion GitHub-based CI/CD deployment, testing strategies, release management, and config standardization.
• Continuously evaluate emerging technologies to improve scalability, reliability, and security.
• Oversee platform resiliency, DR planning, monitoring, and incident response; lead RCA and preventative controls.
• Establish dashboards and alerts for platform health; support audit readiness and vulnerability remediation.
• Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.
• Mentor engineers and promote knowledge sharing; drive automation and operational effectiveness.

Skills

SAML 2.0

OIDC/OAuth 2.0

SCIM APIs

CI/CD pipelines

GitHub delivery

Scripting

Identity lifecycle

Federation design

Splunk analysis

Incident management

Root cause analysis

Production support

Technical leadership

Stakeholder communication

Cross-functional collaboration

Operational excellence

Education

Bachelor's degree

Tools

AWS

Lambda

Secrets Manager

Okta Certified Professional

Job description

Vanguard in Malvern, PA is seeking an experienced Identity Security Engineer to design and implement enterprise identity solutions with Okta Workforce Identity Cloud. You will lead onboarding using SAML, OIDC, and SCIM, ensuring secure authentication, MFA, and lifecycle management across cloud environments.

You will partner with cloud and platform teams to automate operations, drive CI/CD practices, and strengthen platform resiliency, governance, and reporting.