{"id":57490,"url":"https://alion.io/job/vanguard-sr-cloud-security-engineer-okta-identity-platform-engineering","title":"Sr Cloud Security Engineer (Okta Identity Platform Engineering)","company":{"id":253,"name":"The Vanguard Group","domain":"vanguard.com","url":"https://alion.io/company/vanguard","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":87,"ghost_share":0.057,"stale_share":0.506,"repost_share":0.195,"time_to_fill_p50_days":27,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malvern, United States","Dallas, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":110000,"max_usd":211000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"Okta","optional":false},{"name":"OpenTofu","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"AI Agents","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"PKI","optional":true}],"status":"closed","first_seen_at":"2026-08-13T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-27T00:30:38Z","board_verified":false,"closed_at":"2026-10-27T00:30:38Z","days_open":75,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":75},"description":"Shape the future of enterprise identity by engineering, securing, and automating mission-critical workforce identity services that enable secure access across the enterprise. As a senior member of the Identity Platform team, you will drive the design, implementation, operation, and continuous improvement of Okta capabilities that improve security, resiliency, reliability, and user experience.\nThis role combines identity architecture, platform engineering, automation, operational excellence, and technical leadership. You will partner with application teams, infrastructure engineers, cybersecurity, and cloud teams to deliver scalable identity solutions while reducing operational risk and improving service maturity.\nThe ideal candidate brings deep expertise in Okta, modern authentication protocols, identity lifecycle management, cloud security engineering, automation, and incident response, along with a passion for mentoring others and driving continuous improvement.\nCore Responsibilities:\nPlatform Engineering & Identity Solutions\nDesign, implement, and maintain enterprise-scale identity solutions leveraging Okta Workforce Identity capabilities.\nLead application onboarding initiatives including SAML, OIDC/OAuth, SCIM provisioning, federation, lifecycle management, and authentication integrations.\nDevelop scalable identity architectures that improve security, operational efficiency, and end-user experience.\nPartner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.\nAutomation & Engineering Excellence\nDesign and implement automation solutions using APIs, scripting, workflows, infrastructure-as-code, and CI/CD pipelines to reduce manual effort and improve service delivery.\nAutomate operational processes, platform governance controls, application onboarding activities, and compliance reporting.\nDrive platform engineering best practices including Git-based deployment models, testing strategies, release management, and configuration standardization.\nContinuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.\nOperational Reliability & Resiliency\nOwn platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.\nParticipate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues.\nLead root cause analysis activities and implement preventative controls to improve platform stability.\nEstablish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators.\nSecurity, Governance & Compliance\nImplement and maintain secure authentication, authorization, and access management controls.\nSupport audit readiness through development of controls, documentation, evidence collection processes, and governance standards.\nAssess and mitigate security risks associated with identity systems, integrations, and cloud-based services.\nDrive initiatives that enhance platform security posture through continuous improvement, vulnerability remediation, policy modernization, and threat detection capabilities.\nTechnical Leadership\nServe as a technical leader and trusted advisor for workforce identity services and authentication technologies.\nInfluence architecture decisions, engineering standards, and operational best practices across teams.\nMentor engineers and support knowledge-sharing initiatives that reduce key-person dependency and improve organizational resiliency.\nCollaborate with internal stakeholders, vendors, and cross-functional teams to deliver strategic identity initiatives.\nOperational Leadership\nExperience managing major incidents, root cause analysis, and operational readiness activities.\nAbility to analyze complex authentication, authorization, and provisioning issues across multiple integrated systems.\nStrong stakeholder communication and cross-functional collaboration skills.\nExperience developing technical documentation, standards, procedures, and operational runbooks.\nBusiness Outcomes\nDrive measurable improvements in:Faster application onboarding\nPlatform reliability and availability\nIncident response effectiveness\nAutomation adoption\nAudit readiness\nReduction of operational risk\nService scalability and engineering efficiency\n\nRequired Qualifications\nMinimum 8 years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines.\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent experience.\nExtensive hands-on experience with Okta Workforce Identity Cloud.\nAt least 2 current Okta certifications (e.g., Okta Certified Professional, Administrator, Consultant, Developer)\nTechnical Skills\nDemonstrated expertise in:\nSAML 2.0\nOIDC / OAuth 2.0\nSCIM Provisioning\nOkta APIs\nMFA and Adaptive Authentication\nFastPass\nDevice Assurance\nSign-On Policies/Patterns\nFIDO2 and Okta Verify Implementations\nIdentity Lifecycle Management\nFederation Design\nApplication Onboarding and Troubleshooting\nDirectory Services\nStrong experience with:\nCI/CD Pipelines\nGitHub-based Development\nInfrastructure as Code (Terraform or OpenTofu)\nPython, PowerShell, or similar scripting languages\nAWS Services (Lambda, Secrets Manager, CloudWatch)\nREST APIs\nOkta Workflows\nSplunk and Log Analysis\nChange Management and Production Support\nNice to Have:\nIdentity Innovation\nIdentity Threat Protection\nBehavior Detection and Risk Signals\nOkta AI and Agentic AI capabilities\nPlatform Engineering\nAutomation Framework Development\nEvent-Driven Architectures\nGovernance & Recovery\nIdentity Governance Concepts\nDisaster Recovery Planning\nBackup and Recovery Solutions\nAudit and Compliance Frameworks\nCloud & Security\nAWS, GCP and Azure security controls\nSecrets management\nPKI and certificate management\nSecurity monitoring and observability platforms\nWhat Success Looks Like\nIn this role, success means delivering reliable, secure, and scalable identity services that:\nAccelerate application onboarding.\nImprove platform automation and operational efficiency.\nStrengthen the organization's security posture.\nIncrease platform resiliency and reliability.\nEnhance audit readiness and regulatory compliance.\nReduce operational and key-person risk.\nEnable exceptional workforce identity experiences across the enterprise.\nSpecial Factors\nSponsorship\nVanguard is not offering visa sponsorship for this position.About Vanguard\nAt Vanguard, we don't just have a mission-we're on a mission.\nTo work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.\nHow We Work\nVanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.","description_format":"text","description_chars":7443,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Wealth Management & Financial Advisors","Asset Management & Funds","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-08-13T00:00:00Z"},{"event":"close","at":"2026-10-19T04:01:09Z"},{"event":"reopen","at":"2026-10-19T23:36:30Z"},{"event":"close","at":"2026-10-27T00:30:38Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 228 · green card filings: 155","filings_12m":228,"filings_prev_12m":301,"green_card_filings_12m":155,"median_offered_wage_usd":148453,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":28}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/vanguard-sr-cloud-security-engineer-okta-identity-platform-engineering","json_url":"https://alion.io/job/vanguard-sr-cloud-security-engineer-okta-identity-platform-engineering.json","meta":{"generated_at":"2026-10-27T18:13:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8098,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":253},"rest":"https://alion.io/mcp/rest/get_company?id=253"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvanguard-sr-cloud-security-engineer-okta-identity-platform-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvanguard-sr-cloud-security-engineer-okta-identity-platform-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvanguard-sr-cloud-security-engineer-okta-identity-platform-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vanguard-sr-cloud-security-engineer-okta-identity-platform-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvanguard-sr-cloud-security-engineer-okta-identity-platform-engineering"}]}