Cloud Security Engineer, Specialist
About The Position
The Cloud Security Engineer, Specialist designs and implements enterprise identity solutions using Okta Workforce Identity Cloud and leads application onboarding, identity integration, automation, platform governance, and operational improvements. The role partners with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments, while promoting secure authentication, MFA, access management, and a strong user experience. The engineer supports platform reliability and resilience through monitoring, disaster recovery planning, service continuity testing, production support, incident response, root cause analysis, and preventative controls. The position also manages production changes, platform upgrades, vulnerability remediation, audit readiness, and compliance documentation. It leads complex cross-functional initiatives, contributes to architecture and platform roadmaps, and mentors engineers. Vanguard describes its work model as hybrid for the majority of crew members, supporting flexibility alongside in-person learning, collaboration, and connection.
Requirements
- At least 5 years of broad experience working on large-scale systems or services, cloud security engineering, identity platform engineering, identity and access management, or related disciplines.
- Bachelor's degree or an equivalent combination of education and experience.
- Extensive hands-on experience with AWS.
- Experience with AWS services including Lambda and Secrets Manager.
- Experience with SAML 2.0, OIDC/OAuth 2.0, and SCIM.
- Experience with APIs and application sign-on policies and patterns.
- Experience with CI/CD pipelines, GitHub-based delivery, and scripting.
- Experience with identity lifecycle management and federation design.
- Experience analyzing Splunk/syslog data and troubleshooting complex authentication issues.
- Experience with incident management, root cause analysis, and production support.
- Technical leadership and strategic thinking.
- Cross-functional collaboration and executive and stakeholder communication.
- Ability to drive outcomes through ambiguity.
- Incident leadership and operational excellence.
- Continuous improvement and production change leadership.
Nice To Haves
- Experience with Infrastructure as Code.
- Okta Certified Professional certification.
- Knowledge of FastPass and Device Assurance.
- Knowledge of directory services.
Responsibilities
- Design and implement enterprise identity solutions using Okta Workforce Identity Cloud services.
- Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management.
- Ensure authentication, MFA, and access management patterns are followed while improving security and user experience.
- Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.
- Develop automation using APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort.
- Automate operational processes, platform governance controls, application onboarding, and compliance reporting.
- Identify and promote platform engineering practices such as GitHub-based CI/CD deployment, testing strategies, release management, and configuration standardization.
- Evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.
- Support platform resiliency initiatives, including disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.
- Participate in production support and critical incident response, and develop permanent engineering solutions to recurring operational issues.
- Lead root cause analysis and implement preventative controls to improve platform stability.
- Establish and maintain monitoring, alerting, and operational dashboards for platform health and key performance indicators.
- Support audit readiness through controls, governance practices, documentation, and evidence management.
- Manage production changes, platform upgrades, vulnerability remediation, and operational support.
- Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams.
- Influence architecture decisions, engineering standards, and platform roadmaps through technical expertise and stakeholder engagement.
- Mentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance.
- Drive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
