Senior Cloud Security Architect - CSPM & Automation

The Vanguard Group; Malvern (Chester County); Hybrid; USD 150,000 - 210,000; Full time

Job summary

The Vanguard Group in Malvern is seeking a senior security architect to define and own the CSPM tooling and automation platform architecture. You will design event-driven pipelines, API contracts, and data models to scale security findings across thousands of cloud accounts and multiple business units.

You will lead architectural decisions for extensibility, cross-account security patterns, and data ownership, while guiding a team to ensure fault tolerance, observability, and maintainability as

Qualifications

• Five years of related work experience required, with cloud security focus.
• Undergraduate degree in a related field or equivalent experience.
• Proficiency in Python, Go or TypeScript — production-grade not just scripting.
• Strong background in distributed systems concepts: event-driven architectures, async processing, API design, observability.
• Experience across AWS, GCP, Azure at org-wide account structures and IAM at scale.

Responsibilities

• Defines and owns the technical architecture for CSPM tooling, automation platforms, and integration frameworks.
• Designs system-level patterns for security findings flow from detection to remediation.
• Drives architectural decisions on platform extensibility, service boundaries, and data ownership.
• Architects auto-remediation and shift-left enforcement systems at org scale.
• Evaluates tooling and integration patterns and sets technical standards for CSPM connections to enterprise infra.
• Partners with Platform, DevOps, SRE, and AppSec to align interfaces and remediation workflows.
• Leads technical design reviews and mentors engineers on code quality and operational readiness.
• Shapes the roadmap for AI-assisted security capabilities and ML/LLM-based automation.

Skills

Python

Go

TypeScript

Distributed systems

Cloud security

Architectural design

Education

Bachelor's degree or equivalent

Tools

AWS

GCP

Azure

Job description

The Vanguard Group in Malvern is seeking a senior security architect to define and own the CSPM tooling and automation platform architecture. You will design event-driven pipelines, API contracts, and data models to scale security findings across thousands of cloud accounts and multiple business units.

You will lead architectural decisions for extensibility, cross-account security patterns, and data ownership, while guiding a team to ensure fault tolerance, observability, and maintainability as