{"id":3474010,"url":"https://alion.io/job/the-vanguard-group-cloud-security-engineer-specialist-2","title":"Cloud Security Engineer, Specialist","company":{"id":253,"name":"The Vanguard Group","domain":"vanguard.com","url":"https://alion.io/company/vanguard","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":91,"ghost_share":0.099,"stale_share":0.505,"repost_share":0.209,"time_to_fill_p50_days":27,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malvern, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":213000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"Incident Management","optional":false},{"name":"Okta","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-29T18:12:05Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-31T13:58:37Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Responsibilities:\nDesign and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud services.\nLead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.\nThoroughly understands and ensures authentication, MFA, and access management patterns are followed. Maintains improved security and user experience.\nPartner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.\nDevelop automation solutions using APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort.\nAutomate operational processes, platform governance controls, application onboarding activities, and compliance reporting.\nIdentifies opportunities for platform engineering best practices including GitHub-based CI/CD deployment models, testing strategies, release management, and configuration standardization.\nContinuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.\nThoroughly understand platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.\nParticipate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues.\nLead root cause analysis activities and implement preventative controls to improve platform stability.\nEstablish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators.\nSupport audit readiness through controls, governance practices, documentation, and evidence management.\nManage production changes, platform upgrades, vulnerability remediation, and operational support.\nIdentify opportunities to adopt new capabilities that strengthen security, reliability, and efficiency.\nLead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.\nInfluence architecture decisions, engineering standards, and platform roadmaps through strong technical expertise and stakeholder engagement.\nMentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance.\nDrive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness.\nQualifications:\n5+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.\nBachelor's degree or equivalent combination of education and experience.\nExtensive hands-on experience with AWS.\nStrong experience with:AWS services including Lambda and Secrets Manager\n\nSAML 2.0, OIDC/OAuth 2.0, SCIM\n\nAPIs, Application Sign-On Policies/Patterns\n\nCI/CD pipelines, GitHub-based delivery, and scripting\n\nIdentity lifecycle management and federation design\n\nSplunk/syslog analysis, ability to troubleshoot complex authentication issues\n\nIncident management, root cause analysis, and production support\n\nTechnical leadership and strategic thinking\nCross-functional collaboration\nExecutive and stakeholder communication\nDriving outcomes through ambiguity\nIncident leadership and operational excellence\nContinuous improvement and production change leadership\nExperience with Infrastructure as Code preferred\nOkta Certified Professional preferred\nKnowledge of FastPass, Device Assurance preferred\nDirectory services preferred\nSpecial Factors\nSponsorship\nVanguard is offering visa sponsorship for this position.About Vanguard\nAt Vanguard, we don't just have a mission-we're on a mission.\nTo work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.\nHow We Work\nVanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.","description_format":"text","description_chars":4438,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Wealth Management & Financial Advisors","Asset Management & Funds","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-29T18:12:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 228 · green card filings: 155","filings_12m":228,"filings_prev_12m":301,"green_card_filings_12m":155,"median_offered_wage_usd":148453,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":28}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["conf:5","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/the-vanguard-group-cloud-security-engineer-specialist-2","json_url":"https://alion.io/job/the-vanguard-group-cloud-security-engineer-specialist-2.json","meta":{"generated_at":"2026-10-31T16:28:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25728,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":253},"rest":"https://alion.io/mcp/rest/get_company?id=253"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-vanguard-group-cloud-security-engineer-specialist-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-vanguard-group-cloud-security-engineer-specialist-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-vanguard-group-cloud-security-engineer-specialist-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-vanguard-group-cloud-security-engineer-specialist-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-vanguard-group-cloud-security-engineer-specialist-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3474010}},{"tool":"search_jobs","arguments":{"company":"vanguard.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3474010},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}