Cloud Security Engineer, Specialist
Vanguard is hiring a Cloud Security Engineer, Specialist. Level rates it ; you can apply on Vanguard.
Level's read on this job
- Little AI ●○○○ is how Level rates this cybersecurity role: aI is not part of the work.
- Vanguard mentions visa sponsorship in this posting.
- Tools and skills the posting cites include Okta, GitHub and CI/CD.
- Level lists 365 other open roles at Vanguard.
- The role was posted in the last few days.
AI in this role
Design and implement enterprise identity solutions, cloud security controls, and automation pipelines as a Cloud Security Engineer.
Responsibilities:
- Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud services.
- Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.
- Thoroughly understands and ensures authentication, MFA, and access management patterns are followed. Maintains improved security and user experience.
- Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.
- Develop automation solutions using APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort.
- Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting.
- Identifies opportunities for platform engineering best practices including GitHub-based CI/CD deployment models, testing strategies, release management, and configuration standardization.
- Continuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.
- Thoroughly understand platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.
- Participate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues.
- Lead root cause analysis activities and implement preventative controls to improve platform stability.
- Establish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators.
- Support audit readiness through controls, governance practices, documentation, and evidence management.
- Manage production changes, platform upgrades, vulnerability remediation, and operational support.
- Identify opportunities to adopt new capabilities that strengthen security, reliability, and efficiency.
- Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.
- Influence architecture decisions, engineering standards, and platform roadmaps through strong technical expertise and stakeholder engagement.
- Mentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance.
- Drive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness.
Qualifications:
- 5+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.
- Bachelor's degree or equivalent combination of education and experience.
- Extensive hands-on experience with AWS.
- Strong experience with:
- AWS services including Lambda and Secrets Manager
- SAML 2.0, OIDC/OAuth 2.0, SCIM
- APIs, Application Sign-On Policies/Patterns
- CI/CD pipelines, GitHub-based delivery, and scripting
- Identity lifecycle management and federation design
- Splunk/syslog analysis, ability to troubleshoot complex authentication issues
- Incident management, root cause analysis, and production support
- Technical leadership and strategic thinking
- Cross-functional collaboration
- Executive and stakeholder communication
- Driving outcomes through ambiguity
- Incident leadership and operational excellence
- Continuous improvement and production change leadership
- Experience with Infrastructure as Code preferred
- Okta Certified Professional preferred
- Knowledge of FastPass, Device Assurance preferred
- Directory services preferred
Special Factors
Sponsorship
Vanguard is offering visa sponsorship for this position.About Vanguard
At Vanguard, we don't just have a mission—we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.
How we rate this
Cloud Security Engineer, Specialist at Vanguard rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Also common in cybersecurity jobs at this level
Pay
- Typical cybersecurity job
- $159k
This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs
Questions you could be asked
- Tell me about a project where identity management was part of your work. What did you do?
- Tell me about a project where security was part of your work. What did you do?
- Tell me about a project where automation was part of your work. What did you do?
- Tell me about a project where cloud computing was part of your work. What did you do?
- Tell me about a project where incident response was part of your work. What did you do?
Adapt your resume
- List these exact terms on your resume: Identity Management, Security, Automation, Cloud Computing, and Incident Response. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Want an expert to read your CV for this job?
Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.
Get new cybersecurity jobs by email
One email a week with the new cybersecurity jobs, each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free. One email a week. Unsubscribe in one click.
Similar roles
Security roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step