Sr Cloud Security Engineer (Okta Identity Platform Engineering)

Vanguard•Malvern, PA

6d•Hybrid

About The Position

Shape the future of enterprise identity by engineering, securing, and automating mission-critical workforce identity services that enable secure access across the enterprise. As a senior member of the Identity Platform team, this role drives the design, implementation, operation, and continuous improvement of Okta capabilities to improve security, resiliency, reliability, and user experience. The position combines identity architecture, platform engineering, automation, operational excellence, and technical leadership. It partners with application teams, infrastructure engineers, cybersecurity, and cloud teams to deliver scalable identity solutions, reduce operational risk, and improve service maturity. The engineer serves as a technical leader and trusted advisor for workforce identity services, influences architecture and engineering standards, mentors engineers, and collaborates with stakeholders, vendors, and cross-functional teams on strategic identity initiatives. Success means delivering reliable, secure, and scalable identity services that accelerate application onboarding, improve automation and operational efficiency, strengthen security, increase resiliency and reliability, enhance audit readiness and regulatory compliance, reduce operational and key-person risk, and support exceptional workforce identity experiences across the enterprise. Vanguard is not offering visa sponsorship for this position. Vanguard describes its work as being driven by its mission to support clients’ long-term financial wellbeing and transform clients’ lives through products and services. Its hybrid working model applies to the majority of crew members and is designed to support flexibility alongside in-person learning, collaboration, and connection.

Requirements

At least 8 years of broad experience working on large-scale systems or services, cloud security engineering, identity platform engineering, identity and access management, or related disciplines.
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent experience.
Extensive hands-on experience with Okta Workforce Identity Cloud.
At least 2 current Okta certifications, such as Okta Certified Professional, Administrator, Consultant, or Developer.
Demonstrated expertise in SAML 2.0; OIDC/OAuth 2.0; SCIM provisioning; Okta APIs; MFA and adaptive authentication; FastPass; Device Assurance; sign-on policies and patterns; FIDO2 and Okta Verify implementations; identity lifecycle management; federation design; application onboarding and troubleshooting; and directory services.
Strong experience with CI/CD pipelines, GitHub-based development, infrastructure as code using Terraform or OpenTofu, Python, PowerShell or similar scripting languages, AWS services including Lambda, Secrets Manager, and CloudWatch, REST APIs, Okta Workflows, Splunk and log analysis, change management, and production support.
Experience managing major incidents, root cause analysis, and operational readiness activities.
Ability to analyze complex authentication, authorization, and provisioning issues across multiple integrated systems.
Strong stakeholder communication and cross-functional collaboration skills.
Experience developing technical documentation, standards, procedures, and operational runbooks.

Nice To Haves

Familiarity with identity innovation, Identity Threat Protection, behavior detection and risk signals, and Okta AI and agentic AI capabilities.
Experience with platform engineering, automation framework development, and event-driven architectures.
Knowledge of identity governance concepts, disaster recovery planning, backup and recovery solutions, and audit and compliance frameworks.
Experience with AWS, GCP, and Azure security controls, secrets management, PKI and certificate management, and security monitoring and observability platforms.

Responsibilities

Design, implement, and maintain enterprise-scale identity solutions using Okta Workforce Identity capabilities.
Lead application onboarding, including SAML, OIDC/OAuth, SCIM provisioning, federation, lifecycle management, and authentication integrations.
Develop scalable identity architectures that improve security, operational efficiency, and end-user experience.
Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments.
Design and implement automation using APIs, scripting, workflows, infrastructure as code, and CI/CD pipelines.
Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting.
Drive platform engineering practices including Git-based deployment models, testing strategies, release management, and configuration standardization.
Evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness.
Own platform resiliency initiatives, including disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews.
Participate in production support and critical incident response, and develop permanent engineering solutions to recurring operational issues.
Lead root cause analysis and implement preventative controls to improve platform stability.
Establish and maintain monitoring, alerting, and operational dashboards that show platform health and key performance indicators.
Implement and maintain secure authentication, authorization, and access management controls.
Support audit readiness by developing controls, documentation, evidence collection processes, and governance standards.
Assess and mitigate security risks associated with identity systems, integrations, and cloud-based services.
Improve platform security through continuous improvement, vulnerability remediation, policy modernization, and threat detection capabilities.
Influence architecture decisions, engineering standards, and operational best practices across teams.
Mentor engineers and support knowledge-sharing initiatives to reduce key-person dependency and improve organizational resiliency.
Manage or contribute to major incidents, root cause analysis, and operational readiness activities.
Analyze complex authentication, authorization, and provisioning issues across integrated systems.
Develop technical documentation, standards, procedures, and operational runbooks.
Drive measurable improvements in application onboarding speed, platform reliability and availability, incident response, automation adoption, audit readiness, operational risk reduction, scalability, and engineering efficiency.