Senior Cloud Security Engineer

Vanguard; Charlotte (NC); Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Remote-friendly

Job summary

Vanguard is seeking a Senior Cloud Security Architect to lead the architecture and technical direction for CSPM tooling across thousands of cloud accounts. You will design scalable patterns, define data contracts, and guide cross-team integration to reduce risk and improve security posture.

In this role you will mentor engineers, shape the program road map, and drive AI-assisted security capabilities while ensuring maintainability and observability across platforms in a hybrid cloud environment.

Qualifications

• Minimum five years related work experience; two in cloud security preferred.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• Proficiency in Python, Go or TypeScript - production-grade, not just scripting
• Strong background in distributed systems: event-driven architectures, async processing, API design, observability
• Hands-on experience across AWS, GCP, or Azure at org-wide scale and IAM
• Track record of influencing technical direction beyond your immediate team

Responsibilities

• Defines and owns the technical architecture for CSPM tooling, automation platforms, and integration frameworks — ensuring they scale reliably across thousands of cloud accounts and multiple business units.
• Designs system-level patterns to channel security findings from detection through prioritization to remediation.
• Drives architectural decisions on platform extensibility, service boundaries, and data ownership.
• Architects auto-remediation and shift-left enforcement systems at org scale with fault tolerance and auditability.
• Evaluates tooling, frameworks, and integration patterns and owns technical standards for CSPM connections to enterprise infrastructure.
• Partners with engineering leadership to align interfaces, data contracts, and remediation workflows.
• Leads technical design reviews and mentors engineers on code quality and operational readiness.
• Shapes the roadmap for AI-assisted security capabilities and scalable automation.

Skills

Python

Go

TypeScript

Distributed systems

Cloud security

APIs

Education

Bachelor's degree

Tools

AWS

GCP

Azure

CI/CD

IAM

Job description

Defines the architecture and technical direction for cloud security, improving posture and tooling at org scale — designing for automation, extensibility, and cross-functional adoption while shaping the team's strategic roadmap.

Core Responsibilities

• Defines and owns the technical architecture for CSPM tooling, automation platforms, and integration frameworks — ensuring they scale reliably across thousands of cloud accounts and multiple business units.
• Designs system-level patterns (event-driven pipelines, API contracts, data models) that other engineers build on — establishing the foundational approach for how security findings flow from detection through prioritization to remediation.
• Drives architectural decisions on platform extensibility, service boundaries, and data ownership — balancing near-term delivery against long-term maintainability as the program grows.
• Architects auto-remediation and shift-left enforcement systems that operate at org scale — designing for fault tolerance, auditability, and graceful degradation when upstream systems change.
• Evaluates and selects tooling, frameworks, and integration patterns that the broader team adopts — owning the technical standards for how CSPM systems connect to enterprise infrastructure (CI/CD, CMDB, ITSM, identity providers).
• Partners with engineering leadership across Platform, DevOps, SRE, and application security teams to align on shared interfaces, data contracts, and remediation workflows that reduce friction at organizational boundaries.
• Leads technical design reviews and mentors engineers on the team — raising the bar on code quality, system thinking, and operational readiness.
• Shapes the technical roadmap for AI-assisted security capabilities — evaluating where machine learning and LLM-based automation can meaningfully reduce risk or operational burden, and architecting the systems to deliver them.

Qualifications

• Minimum of five years related work experience required, with two years experience in cloud security preferred.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• Proficiency in Python, Go or TypeScript - production-grade, not just scripting
• Strong background in distributed systems concepts: event-driven architectures, async processing, API design, observability
• Hands‑on experience across at least one of: AWS, GCP, Azure — at the level of org-wide account structures, landing zones, and cross‑account security patterns and IAM at scale.
• Track record of influencing technical direction beyond your immediate team

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.