hirly

Vanguard

Cloud Security Engineer, Specialist

Malvern, PA

See how you match this job — and similar ones. Free.

Upload your resume and hirly scores it against this role at Vanguard first, then against similar open jobs, and shows where you fit and why.

PDF or DOCX, up to 12MB. No sign-up to see your matches.

Get past the screening software and onto a recruiter's desk

hirly rewrites your resume for this job — matching the keywords and skills in the posting, moving your most relevant experience to the top, and writing a cover letter to fit. About 30 seconds.

  • Keywords matched to this posting
  • Fit score before you apply
  • Cover letter included

Matched against 2.6M live jobs from 210,000+ employers in 200+ countries.

Tailor my resume for this job →

Apply from your AI assistant

Connect hirly to Claude or ChatGPT and ask it to apply to this job. hirly tailors your resume, fills the employer’s form and asks before sending.

Some employer sites stop an application at a CAPTCHA or sign-in and hand it back with a link. Applying needs a paid plan. Works with any assistant that supports MCP.

hirly's read of this role

Role family
Engineering
Seniority
Mid level
Country
US
Work mode
On-site / unstated
First seen by hirly
29 Oct 2026

Derived automatically from the posting. Upload your resume above to see how the role scores against it.

the posting

Responsibilities :

Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud services.

Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.

Thoroughly understands and ensures authentication, MFA, and access management patterns are followed. Maintains improved security and user experience.

  • Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.
  • Develop automation solutions using APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort.

Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting.

Identifies opportunities for platform engineering best practices including GitHub-based CI/CD deployment models, testing strategies, release management, and configuration standardization.

  • Continuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.
  • Thoroughly understand platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.

Participate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues.

Lead root cause analysis activities and implement preventative controls to improve platform stability.

  • Establish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators.
  • Support audit readiness through controls, governance practices, documentation, and evidence management.

Manage production changes, platform upgrades, vulnerability remediation, and operational support.

  • Identify opportunities to adopt new capabilities that strengthen security, reliability, and efficiency.
  • Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.

Influence architecture decisions, engineering standards, and platform roadmaps through strong technical expertise and stakeholder engagement.

Mentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance.

Drive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness.

Qualifications:

5+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.

Bachelor's degree or equivalent combination of education and experience.

  • Extensive hands-on experience with AWS.
  • Strong experience with:
  • AWS services including Lambda and Secrets Manager

SAML 2.0, OIDC/OAuth 2.0, SCIM

APIs, Application Sign-On Policies/Patterns

CI/CD pipelines, GitHub-based delivery, and scripting

Identity lifecycle management and federation design

Splunk/syslog analysis, ability to troubleshoot complex authentication issues

Incident management, root cause analysis, and production support

Technical leadership and strategic thinking

Cross-functional collaboration

Executive and stakeholder communication

Driving outcomes through ambiguity

Incident leadership and operational excellence

  • Continuous improvement and production change leadership
  • Experience with Infrastructure as Code preferred
  • Okta Certified Professional preferred
  • Knowledge of FastPass, Device Assurance preferred

Directory services preferred

Special Factors

Sponsorship

Vanguard is offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Original posting on Vanguard's site ↗

Listed on hirly, a job board. hirly is not the employer: Vanguard is hiring for this role.

Browse similar roles

Want this one?

Upload your resume and hirly rewrites it for this job and writes the cover letter — in about thirty seconds, before you sign up.

Tailor my resume for this job