Hybrid Cloud Security Engineer: AWS IAM & CSPM

Vanguard; Malvern (Chester County); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Vanguard in Malvern, PA is seeking a Cloud Security Engineer to design, implement, and maintain cloud security controls across AWS environments. You will partner with cross-functional teams to strengthen our security posture and support IAM policies and security frameworks.

Join the Cloud Identity Security team within Enterprise Security & Fraud to drive vulnerability management, monitoring, access governance, and ongoing security improvements in a hybrid work model.

Qualifications

• Minimum of three years related work experience.
• Undergraduate degree in a related field or the equivalent combination of training and experience.

Responsibilities

• Design, implement, deploy, and maintain cloud security solutions, controls, and security platforms to mitigate security threats, technology vulnerabilities, and operational risks within AWS environments.
• Support and monitor cloud security technologies, ensuring effectiveness through the use of monitoring tools, alerting systems, and security applications.
• Investigate, troubleshoot, resolve, or elevate AWS Cloud Security and AWS IAM incidents, access-related issues, and security events.
• Develop, maintain, and enhance cloud security standards, controls, testing procedures, log analysis processes, and vulnerability assessment methodologies.
• Perform security reviews, risk assessments, and remediation activities to strengthen cloud security and compliance posture.
• Monitor system access logs, audit trails, and security events to identify suspicious activity, anomalous behavior, or unauthorized access attempts that may indicate potential security breaches.
• Collaborate with engineering, infrastructure, DevOps, and application development teams to implement secure cloud solutions and promote security best practices.
• Support identity and access management initiatives, including access controls, role-based access management (RBAC), least-privilege principles, and cloud identity governance.
• Maintain technical documentation, operational procedures, security standards, and knowledge base articles for the team and department.
• Participate in security-focused projects, cloud modernization initiatives, and other duties as assigned.
• Identify opportunities to improve cloud security processes, automation, operational efficiency, and risk reduction efforts.

Skills

AWS security

IAM policies

Cloud security monitoring

Log analysis

Automation scripting

DevSecOps

CI/CD

Terraform

CloudFormation

CSPM

Wiz

RBAC

Identity security

Education

Bachelor's degree or equivalent

Tools

CloudFormation

Terraform

Job description

Vanguard in Malvern, PA is seeking a Cloud Security Engineer to design, implement, and maintain cloud security controls across AWS environments. You will partner with cross-functional teams to strengthen our security posture and support IAM policies and security frameworks.

Join the Cloud Identity Security team within Enterprise Security & Fraud to drive vulnerability management, monitoring, access governance, and ongoing security improvements in a hybrid work model.