Cloud Security Engineer, Specialist

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g. assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape. Our crew are our greatest resource - by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

Cloud Security Engineer, Specialist"

• Plans and implements new security technologies and major releases for the most critical enterprise-wide IT cloud platform projects. Designs, implements, and deploys cloud security systems to support and meet business needs. Identifies, recommends, and implements opportunities for improvement and performance issue solutions.
• Provides expert level technical support and ensures reliable operation of cloud production. Diagnoses and troubleshoots the most complex security issues for cloud computing systems. Contributes to the implementation of leading security technologies in infrastructure to improve its overall performance. Maintains comprehensive technical knowledge of software and infrastructure platforms.
• Develops auditing methodologies and architecture to manage and protect data in cloud computing environments.
• Elevates code into the development, test, and production environments on schedule. Provides follow up production support. Submits change control requests and documents.
• Learns and understands client area business functions and requirements. Determines the appropriate technical tool to address the client's business needs.
• Trains and mentors more junior staff on processes and technologies. Troubleshoots and resolves the most complex issues elevated from staff. Provides guidance and consultation as required. Updates, writes, and maintains documentation for the department.
• Administers system activities. Writes the technical portion of assigned deliverables. Performs systems analysis, including system requirements analysis and definition, and logical design.
• Participates in special projects and performs other duties as assigned.

• 8+ years of software engineering, platform engineering, or DevOps experience.
• Experience developing applications using Java, Python, or similar languages.
• Experience with cloud platforms
• Experience with REST APIs, microservices, and distributed systems.
• Experience with CI/CD pipelines and source control platforms.
• Knowledge of authentication and authorization concepts.
• Experience troubleshooting production systems and participating in incident response.
• Strong communication and collaboration skills.
• Bachelor's degree in Computer Science, Engineering, Information Systems, or equivalent experience

• Experience with OAuth 2.0, FIDO2, WebAuthn, Passkeys, MFA, or identity orchestration platforms.
• Experience with observability and monitoring platforms
• Experience implementing SLOs, SLIs, error budgets, and SRE practices.
• Experience with containers, and Infrastructure as Code.
• Experience in financial services, cybersecurity, or highly regulated environments.
• Familiarity with resiliency engineering, disaster recovery, and large-scale authentication platforms.