Senior Specialist, Lead Zero Trust Identity Security Engineering Job at Vanguard, Malvern, PA

  • Vanguard
  • Malvern, PA

Job Description

Key ResponsibilitiesIdentity Platform Engineering & LeadershipServe as technical lead for workforce identity platforms, with Okta as the primary IdP and integrations to complementary platforms (e.g., Ping/Entra Identity).Own end‑to‑end identity architecture, including authentication flows, federation, directory integrations, and token issuance.Lead design reviews and decisions for IdP resiliency, failover, and supplier‑risk mitigation strategies.Document existing and new architecture and act as a hands‑on engineer while also setting technical direction, patterns, and standards.Strong communication, influence, and stakeholder‑management skills, with the ability to distill complex identity and security architectures into clear and concise messagingStandards‑Based Identity & FederationDesign and troubleshoot identity flows using OAuth 2.0 / OIDC SAML 2.0 SCIM JWT / token‑based authEnsure token parity, claim consistency, and issuer abstraction across identity providers to minimize application impact.Partner with application teams to enable modern authentication without app re‑architecture.Directory & Identity Data ArchitectureEngineer and maintain directory integrations across Active Directory, Okta UD, and cloud directories (e.g., Ping Directory).Design attribute models, lifecycle management, and group strategies at enterprise scale (thousands of groups, large population sizes).Support directory deployments in cloud‑native environments (AWS/GCP, containers, Kubernetes).Cloud, Automation & ReliabilityBuild and operate identity infrastructure in AWS/GCP/Azure, using: Infrastructure & Policy as Code (Terraform / CloudFormation) Kubernetes & containerized identity servicesAutomate provisioning, deployment, monitoring, and drift detection for identity platforms.Support SRE‑style operational maturity: SLIs/SLOs, alerting, incident response, and runbooks for identity services.Security, Risk & ComplianceDesign identity controls aligned to Zero Trust principles and enterprise security policies.Partner with CSOC, audit, and risk teams on: Control validation Incident response Regulatory and audit requirements (SOX, SOC, internal controls)Contribute to risk assessments related to supplier dependency, SPOFs, and identity outages.Collaboration & InfluenceWork closely with security architecture, infrastructure, application engineering, IAM operations, and vendors.Influence roadmap decisions through clear technical reasoning and executive‑ready communication.Mentor senior and mid‑level engineers and raise overall identity engineering maturity.QualificationsUndergraduate degree in a related field or the equivalent combination of training and experience.12+ years of experience in Identity & Access Management engineering.Skilled in using DevOps tools and experience in Policy as code.Deep hands‑on expertise with Okta (Workforce Identity, MFA, SSO, policies, lifecycle).Strong working knowledge of Ping Identity products (PingFederate, PingOne, Ping Directory) or equivalent platforms.Expert understanding of identity standards: OAuth 2.0, OIDC, SAML Federation and token‑based securityProven experience with directory services & LDAP (AD, cloud directories).Experience building identity platforms in AWS/GCP, including containerized/Kubernetes deployments.Strong troubleshooting skills for complex authentication and federation failures.Ability to operate in high‑visibility, high‑impact environments.Special FactorsSponsorshipVanguard is offering visa sponsorship for this position.About VanguardAt Vanguard, we don't just have a mission—we're on a mission.To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.How We WorkVanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.SummaryLocation: Malvern, PA; Dallas/Ft. Worth, TXType: Full time

Job Tags

Full time, Visa sponsorship

Similar Jobs

STEPHEN MILLS AGENCY INC Farmers Insurance

Insurance Agent - Sales Job at STEPHEN MILLS AGENCY INC Farmers Insurance

 ...Description Job Description Stephen Mills Agency, Farmers Insurance in El Dorado, KS is hiring Insurance Sales Representatives to...  ...Farmers agencies in Kansas and is in the Top 1% of Farmers agencies nationwide for the past two years. We provide Auto, Home, Business, and... 

Renew

Cabinet Finisher Job at Renew

 ...We are seeking a Lead Cabinet Finisher to join our growing team. The ideal candidate will have a strong background in woodworking and finishing techniques, with a keen eye for detail and quality. This role involves restoring and finishing cabinets that have been damaged... 

SeaWorld Parks & Entertainment

Makeup Artist Job at SeaWorld Parks & Entertainment

 ...around the world. If you're dedicated, dependable and driven to deliver exceptional guest service, this is a place for you!Seasonal Makeup Artist - Howl-O-ScreamBusch Gardens WilliamsburgWhat You Get To DoApplying makeup for our Howl-O-Scream Terror-Tories and monitor... 

The Nielsen Company

Director of Product Marketing Job at The Nielsen Company

 ...Director of Product Marketing At Nielsen, we are passionate about our work to power a better media future for all people by providing powerful insights that drive client decisions and deliver extraordinary results. Our talented, global workforce is dedicated to capturing... 

Home Care Network, Inc

HHA/CNA/STNA - Home Health Agency - PT or FT Job at Home Care Network, Inc

 ...Job Description JOB TITLE: Home Health Aide [including STNA, CNA, HHA, PCA, DSP/DODD] WHO SHOULD APPLY: Active STNAs, CNAs,...  ...Professionals with 1+ year paid home care experience preferred (agency experience a plus) STANDARDS ALL APPLICANTS MUST DEMONSTRATE...