Cloud Security Specialist (IAM & Cloud Controls)

Vanguard; Malvern (Chester County); On-site; USD 140,000 - 190,000; Full time

Job summary

Vanguard is seeking a Technical Product Manager to lead the Cloud IAM program. You will own the roadmap for preventive and detective IAM controls, governance automation, and identity-based security policies across multi-cloud environments.

You will partner with engineering and security teams to design scalable IAM solutions, translate complex audit requirements into technical requirements, and drive Agile delivery.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5+ years in technical product management or ownership, security engineering, cloud engineering, or IAM-focused roles.
• Strong understanding of cloud platforms (AWS/Azure/GCP) and IAM concepts.
• Experience with policy-as-code, CI/CD integrations, and cloud security tooling, and policy frameworks (e.g. Terraform, CloudFormation, Rego/OPA).
• Experience with SQL, Python, and APIs.
• Demonstrated experience delivering complex, cross-functional technology products using agile methodologies.
• Ability to read, reason about, and influence technical designs and rule logic.

Responsibilities

• Manage the technical product roadmap for cloud IAM capabilities, including preventive and detective controls, governance automation, and identity-based security policies.
• Partner with engineering, architecture, and security teams to design, build, and scale IAM controls and multi-cloud security solutions.
• Drive delivery of IAM capabilities such as pipeline controls, runtime configuration checks, and identity-based governance rules.
• Translate enterprise IAM strategy, audit requirements, and risk priorities into well-defined technical product requirements.

Skills

Cloud platforms

Policy-as-code

SQL

Python

APIs

Agile methodologies

Cross-functional collaboration

Security engineering

Education

Bachelor's degree or equivalent

Tools

Terraform

CloudFormation

Rego/OPA concepts

PySpark

YAML

Job description

Core Responsibilities (Technical Product Delivery)

Manage the technical product roadmap for cloud IAM capabilities, including preventive and detective controls, governance automation, and identity‑based security policies.

Partner with engineering, architecture, and security teams to design, build, and scale IAM controls and multi-cloud security solutions.

Drive delivery of IAM capabilities such as pipeline controls, runtime configuration checks, and identity‑based governance rules .

Translate enterprise IAM strategy, audit requirements, and risk priorities into well‑defined technical product requirements .

Cloud IAM Engineering Partnership

Drive delivery of IAM controls embedded into CI/CD pipelines , runtime configuration checks, and identity‑centric governance rules.

Own and prioritize the product backlog, translating business requirements into actionable user stories and technical specifications.

Act as a product leader within agile teams. Lead Agile ceremonies (e.g., sprint planning, backlog refinement, retrospectives) and foster a culture of continuous improvement within the team.

Participate in quarterly planning as needed, with emphasis on technical readiness, dependencies, and release quality .

Client Partnership & Platform Enablement

Act as the technical product interface between IAM, cloud platform teams, security partners, developers, and external vendors.

Partner with third-party vendor product teams to lead collaborations, setting priorities on IAM roadmap items, ensuring delivery commitments and issue resolutions.

Clearly communicate technical expectations, upcoming changes, and adoption guidance to engineering and platform consumers.

Provide \"white‑glove\" support for high‑impact initiatives and time‑sensitive requests while maintaining strong governance discipline.

Deliver product updates, roadmap communications, and set expectations by developing presentations and release management materials. Share these through enterprise forums, departmental meetings, office hours, and community channels.

Building strong relationships across the Vanguard Sub-divisions, CTO/GTO platform teams and external partners to enable execution.

Provide expert‑level consultation for complex IAM use cases, exceptions, and high‑risk scenarios.

Operational Excellence & Product Lifecycle Management

Ensure IAM products are production‑ready, supportable, and compliant with enterprise standards.

Maintain high‑quality technical documentation, design artifacts, and runbooks to support audit, operations, and scale.

Understanding and utilization of data visualization tools to monitor product performance, generate metrics/dashboard to tailor message to various stakeholders and senior leadership.

Identify opportunities to improve efficiency through automation, tooling, and emerging technologies (including AI/ML where appropriate).

Participates in on‑call rotation and provides off‑hours support as required to ensure service availability and incident resolution.

Participates in special projects and performs other duties as assigned.

Technical Leadership & Mentorship

Serve as a technical thought leader within IAM Cloud, mentoring engineers and early‑career professionals on IAM patterns, cloud security, and product design.

Manage onboarding and offboarding processes for team members across multiple Vanguard locations.

Influence standards and best practices for IAM product development across teams.

Contribute to a collaborative, inclusive, and high‑performing team culture.

Qualifications and Skills (Technical Skills & Experience Required)

• Bachelor's degree or equivalent practical experience.


• 5+ years in technical product management or ownership, security engineering, cloud engineering, or IAM‑focused roles .


• Strong understanding of cloud platforms (one or more: AWS, Azure, GCP, OCI) and Identity & Access Management concepts.


• Experience working directly with engineering teams on policy‑as‑code, CI/CD integrations, and cloud security tooling, and policy frameworks (e.g. Terraform, CloudFormation, Rego/OPA concepts).


• Experience with SQL, Python, and APIs


• Demonstrated experience delivering complex, cross‑functional technology products using agile methodologies.


• Ability to read, reason about, and influence technical designs and rule logic (even if not writing production code daily).

Preferred

• Experience with CSPM, identity posture management, or cloud governance platforms.


• Experience with PySpark, Rego, YAML, AI.


• Experience operating in regulated or audit‑driven environments.


• Agile, Scrum, or Product Management certification (nice to have, not required).


• Excellent communication skills with the ability to influence technical and non‑technical stakeholders.

Why This Role Matters

This role is central to reducing enterprise risk, enabling secure cloud adoption, and operationalizing IAM strategy through technology . Success is measured by technical coverage, control effectiveness, and platform trust . The Clou