Senior Cloud Security Engineer: IAM & Policy Architect

The Vanguard Group; Malvern (Chester County); Hybrid; USD 140,000 - 200,000; Full time

Job summary

The Vanguard Group in Malvern, PA seeks a senior cloud security engineer to lead design and delivery of scalable controls across enterprise cloud deployments. You will mentor engineers, set coding and security standards, and shape policy-driven automation for secure cloud adoption.

Hybrid work model supported; emphasis on hands-on coding (Python), IaC (CloudFormation/Terraform), and security tooling with CI/CD integrations to ensure auditability and resilience across services.

Qualifications

• Seven+ years related work experience, with four+ years in cloud or security engineering preferred.
• Hands-on engineering — writes and ships production-grade code (Python or equivalent) and heavy hands-on infrastructure-as-code.
• Familiarity with policy-as-code, CI/CD integrations, code repositories and pipelines.
• Deep cloud expertise across AWS, with org-wide account structures and security patterns at scale.
• Knowledge of IAM policy mechanics — inline, customer-managed, permission boundaries, SCPs, and resource/identity policies.

Responsibilities

• Lead technical design reviews and own the standards for how controls are built, tested, and shipped.
• Train, mentor, and coach engineers on technology standards, best practices, and frameworks; resolve complex issues.
• Influence engineering patterns and best practices across teams; drive technical direction beyond your immediate team.
• Design enterprise-scale solutions (policy pipelines, event-driven remediation) that other engineers build on.
• Evaluate and select tooling and patterns for the broader team; own technical standards for controls connections to enterprise infrastructure.
• Move between design and hands-on build; stay close to the code.
• Automate posture checks, drift detection, and event-driven remediation; explore AI/ML tooling where appropriate.

Skills

Technical leadership

Hands-on engineering

Python

Infrastructure as Code

CloudFormation

Terraform

AWS security

CI/CD automation

Policy-as-code

Cross-cloud expertise

Security auditing/compliance

Education

Undergraduate degree

Tools

GitHub

CloudFormation

Terraform

boto3

AWS CLI

Job description

The Vanguard Group in Malvern, PA seeks a senior cloud security engineer to lead design and delivery of scalable controls across enterprise cloud deployments. You will mentor engineers, set coding and security standards, and shape policy-driven automation for secure cloud adoption.

Hybrid work model supported; emphasis on hands-on coding (Python), IaC (CloudFormation/Terraform), and security tooling with CI/CD integrations to ensure auditability and resilience across services.