Senior Cloud Security Engineer

Talentify; Charlotte (NC); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Vanguard is seeking a senior security architect to own CSPM tooling architecture and automation platforms. You will design scalable patterns, govern data contracts, and drive enterprise-grade security automation across multiple cloud environments.

You will partner with Platform, DevOps, SRE, and security teams to ensure consistent interfaces and responsible AI-driven capabilities while promoting operational readiness and maintainability.

Qualifications

• Minimum of five years related work experience required, with two years experience in cloud security preferred.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• Proficiency in Python, Go or TypeScript - production-grade, not just scripting.
• Strong background in distributed systems concepts: event-driven architectures, async processing, API design, observability.
• Hands-on experience across AWS, GCP, or Azure at org-wide scale.

Responsibilities

• Defines and owns the technical architecture for CSPM tooling, automation platforms, and integration frameworks—ensuring they scale across thousands of cloud accounts and multiple business units.
• Designs system-level patterns that govern detections, prioritization, and remediation flows.
• Drives architectural decisions on platform extensibility, service boundaries, and data ownership.
• Architects auto-remediation and shift-left enforcement systems that operate at org scale.
• Evaluates and selects tooling, frameworks, and integration patterns that CSPM teams adopt and standardizes connections to CI/CD, CMDB, ITSM, and identity providers.
• Partners with engineering leadership to align on shared interfaces, data contracts, and remediation workflows.
• Leads technical design reviews and mentors engineers to improve code quality and operational readiness.
• Shapes the roadmap for AI-assisted security capabilities and LL-based automation.

Skills

Python

Go

TypeScript

Distributed systems

Event-driven

API design

Security architecture

Cloud security

Leadership

Education

Bachelor's degree in a related field

Tools

AWS

GCP

Azure

Job description

Open — Vanguard has a posting for this job. Posted 28 Sep 2026.

This posting opens vanguard.wd5.myworkdayjobs.com. The applicant should apply there.

About this job

Core Responsibilities

• Defines and owns the technical architecture for CSPM tooling, automation platforms, and integration frameworks — ensuring they scale reliably across thousands of cloud accounts and multiple business units.
• Designs system-level patterns (event-driven pipelines, API contracts, data models) that other engineers build on — establishing the foundational approach for how security findings flow from detection through prioritization to remediation.
• Drives architectural decisions on platform extensibility, service boundaries, and data ownership — balancing near-term delivery against long-term maintainability as the program grows.
• Architects auto-remediation and shift-left enforcement systems that operate at org scale — designing for fault tolerance, auditability, and graceful degradation when upstream systems change.
• Evaluates and selects tooling, frameworks, and integration patterns that the broader team adopts — owning the technical standards for how CSPM systems connect to enterprise infrastructure (CI/CD, CMDB, ITSM, identity providers).
• Partners with engineering leadership across Platform, DevOps, SRE, and application security teams to align on shared interfaces, data contracts, and remediation workflows that reduce friction at organizational boundaries.
• Leads technical design reviews and mentors engineers on the team — raising the bar on code quality, system thinking, and operational readiness.
• Shapes the technical roadmap for AI-assisted security capabilities — evaluating where machine learning and LLM-based automation can meaningfully reduce risk or operational burden, and architecting the systems to deliver them.

Qualifications

• Minimum of five years related work experience required, with two years experience in cloud security preferred.
• Undergraduate degree in a related field or the equivalent combination of training and experience.
• Proficiency in Python, Go or TypeScript - production-grade, not just scripting
• Strong background in distributed systems concepts: event-driven architectures, async processing, API design, observability
• Hands-on experience across at least one of: AWS, GCP, Azure — at the level of org-wide account structures, landing zones, and cross-account security patterns and IAM at scale.
• Track record of influencing technical direction beyond your immediate team

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Vanguard's other jobs that have a page here. Each page says open or closed for itself.

Opens vanguard.wd5.myworkdayjobs.com, after a short hand-off page here.

One page per job at this company, in this place. Open or closed, it says which.

Open: the posting you see is the one you apply to, on the employer's site. No account here.

Closed: the page stays, keeps this job's history, and turns back to Open when the employer posts it again.

State comes from Talentify's job index. Closures are checked every hour and every page is re-read at least daily, so a change on the employer's side can take a day or more to show here.