Cloud Security Engineer, Specialist

Responsibilities

• Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud services.
• Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.
• Thoroughly understands and ensures authentication, MFA, and access management patterns are followed. Maintains improved security and user experience.
• Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.
• Develop automation solutions using APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort.
• Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting.
• Identifies opportunities for platform engineering best practices including GitHub-based CI/CD deployment models, testing strategies, release management, and configuration standardization.
• Continuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.
• Thoroughly understand platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.
• Participate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues.
• Lead root cause analysis activities and implement preventative controls to improve platform stability.
• Establish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators.
• Support audit readiness through controls, governance practices, documentation, and evidence management.
• Manage production changes, platform upgrades, vulnerability remediation, and operational support.
• Identify opportunities to adopt new capabilities that strengthen security, reliability, and efficiency.
• Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.
• Influence architecture decisions, engineering standards, and platform roadmaps through strong technical expertise and stakeholder engagement.
• Mentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance.
• Drive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness.

Qualifications

• 5+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.
• Bachelor's degree or equivalent combination of education and experience.
• Extensive hands-on experience with AWS.
• Strong experience with:
• AWS services including Lambda and Secrets Manager
• SAML 2.0, OIDC/OAuth 2.0, SCIM
• APIs, Application Sign-On Policies/Patterns
• CI/CD pipelines, GitHub-based delivery, and scripting
• Identity lifecycle management and federation design
• Splunk/syslog analysis, ability to troubleshoot complex authentication issues
• Incident management, root cause analysis, and production support
• Technical leadership and strategic thinking
• Cross-functional collaboration
• Executive and stakeholder communication
• Driving outcomes through ambiguity
• Incident leadership and operational excellence
• Continuous improvement and production change leadership
• Experience with Infrastructure as Code preferred
• Okta Certified Professional preferred
• Knowledge of FastPass, Device Assurance preferred
• Directory services preferred

Special Factors

Sponsorship

Vanguard is offering visa sponsorship for this position.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.