Cloud Security Engineer, Specialist

Vanguard; Malvern (Chester County); On-site; USD 140,000 - 210,000; Full time

Job summary

Vanguard in Malvern, PA, is seeking a seasoned Cloud Identity Engineer to design and automate Okta Workforce Identity Cloud capabilities, elevating security, resiliency, and reliability across the enterprise. You will lead application onboarding with SAML, OIDC, SCIM, and lifecycle management, while ensuring robust authentication and MFA patterns.

Collaborate with cloud/platform teams to scale automation via APIs and CI/CD, driving governance and operational excellence.

Qualifications

• 5+ years in large-scale systems or security engineering.
• Bachelor's degree or equivalent.
• Extensive AWS experience.
• Experience with AWS Lambda and Secrets Manager.
• SAML 2.0, OIDC/OAuth 2.0, SCIM.
• CI/CD pipelines and GitHub-based delivery.
• Identity lifecycle management and federation design.
• Incident management and root cause analysis.
• Technical leadership and cross-functional collaboration.

Responsibilities

• Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud services.
• Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.
• Ensure authentication, MFA, and access management patterns are followed and improve security and UX.
• Partner with cloud and platform teams to integrate identity controls across environments.
• Develop automation using APIs, scripting, workflows, and CI/CD pipelines.
• Automate operational processes, governance controls, and onboarding activities.
• Drive platform engineering best practices including CI/CD and testing strategies.
• Continuously evaluate emerging technologies to improve scale, reliability, and security.
• Lead incident response, root cause analysis, and preventative controls.
• Establish monitoring, dashboards, and audit readiness for platform health.

Skills

AWS

SAML OIDC

CI/CD

Automation scripting

Identity lifecycle

Incident response

Leadership

Cross-functional

Education

Bachelor's degree

Tools

Lambda

Secrets Manager

GitHub

IaC

Job description

Shape the future of enterprise identity by engineering and automating critical Vanguard Okta capabilities that improve security, resiliency, and reliability across the enterprise. This role leads to advanced level IT technical lead services including the design, implementation, operation, and continuous improvement of workforce identity cloud services, including application onboarding, authentication, lifecycle management, CI/CD build pipeline, automation, and platform governance. The ideal candidate combines strong platform engineering skills with proven technical leadership to advance strategic identity initiatives. Demonstrate a determined commitment to learning Okta SaaS and building expertise through continuous self and hands-on learning.

Responsibilities

• Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud services.
• Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.
• Thoroughly understands and ensures authentication, MFA, and access management patterns are followed. Maintains improved security and user experience.
• Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.
• Develop automation solutions using APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort.
• Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting.
• Identifies opportunities for platform engineering best practices including GitHub-based CI/CD deployment models, testing strategies, release management, and configuration standardization.
• Continuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.
• Thoroughly understand platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.
• Participate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues.
• Lead root cause analysis activities and implement preventative controls to improve platform stability.
• Establish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators.
• Support audit readiness through controls, governance practices, documentation, and evidence management.
• Manage production changes, platform upgrades, vulnerability remediation, and operational support.
• Identify opportunities to adopt new capabilities that strengthen security, reliability, and efficiency.
• Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.
• Influence architecture decisions, engineering standards, and platform roadmaps through strong technical expertise and stakeholder engagement.
• Mentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance.
• Drive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness.

Qualifications

• 5+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.
• Bachelor's degree or equivalent combination of education and experience.
• Extensive hands-on experience with AWS.
• Strong experience with:
• AWS services including Lambda and Secrets Manager
• SAML 2.0, OIDC/OAuth 2.0, SCIM
• APIs, Application Sign-On Policies/Patterns
• CI/CD pipelines, GitHub-based delivery, and scripting
• Identity lifecycle management and federation design
• Splunk/syslog analysis, ability to troubleshoot complex authentication issues
• Incident management, root cause analysis, and production support
• Technical leadership and strategic thinking
• Cross-functional collaboration
• Executive and stakeholder communication
• Driving outcomes through ambiguity
• Incident leadership and operational excellence
• Continuous improvement and production change leadership
• Experience with Infrastructure as Code preferred
• Okta Certified Professional preferred
• Knowledge of FastPass, Device Assurance preferred
• Directory services preferred

Sponsorship

Vanguard is offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission - we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.