> Markdown version of [/jobs/ext/2657437-sr-cloud-security-engineer-okta-identity](https://www.wearedevelopers.com/jobs/ext/2657437-sr-cloud-security-engineer-okta-identity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Cloud Security Engineer (Okta Identity... - **Company:** Vanguard - **Location:** Malvern, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, User Authentication, Authentication Protocols, Cloud Computing, Cloud Computing Security, Cyber Security, Disaster Recovery, Github, Identity and Access Management, Python (Programming Language), Log Analysis, OAuth, OpenID, Windows PowerShell, Release Management, Cloud Services, Runbook, Security Assertion Markup Language (SAML), Software Testing Automation Framework, Systems Integration, Strategies of Testing, User Environment Management, Software Vulnerability Management, Scripting, Cloud Platform System, Okta, System Availability, Git, Event Driven Architecture, Information Technology, Virtual Agents, Cloudwatch, Restful APIs, Terraform, Splunk - **Published:** August 14, 2026 - **Apply:** https://www.juju.com/job/00000000gn4aqp ## About the Role + Experience managing major incidents, root cause analysis, and operational readiness activities. + Ability to analyze complex authentication, authorization, and provisioning issues across multiple integrated systems. + Strong stakeholder communication and cross-functional collaboration skills. + Experience developing technical documentation, standards, procedures, and operational runbooks. Business Outcomes + Drive measurable improvements in: + Faster application onboarding + Platform reliability and availability + Incident response effectiveness + Automation adoption + Audit readiness + Reduction of operational risk + Service scalability and engineering efficiency Required Qualifications + Minimum 7 years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines. + Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent experience. + Extensive hands-on experience with Okta Workforce Identity Cloud. + At least 2 current Okta certifications (e.g., Okta Certified Professional, Administrator, Consultant, Developer) Technical Skills Demonstrated expertise in: + SAML 2.0 + OIDC / OAuth 2.0 + SCIM Provisioning + Okta APIs + MFA and Adaptive Authentication + FastPass + Device Assurance + Sign-On Policies/Patterns + FIDO2 and Okta Verify Implementations + Identity Lifecycle Management + Federation Design + Application Onboarding and Troubleshooting + Directory Services Strong experience with: + CI/CD Pipelines + GitHub-based Development + Infrastructure as Code (Terraform or OpenTofu) + Python, PowerShell, or similar scripting languages + AWS Services (Lambda, Secrets Manager, CloudWatch) + REST APIs + Okta Workflows + Splunk and Log Analysis + Change Management and Production Support Nice to Have: Identity Innovation + Identity Threat Protection + Behavior Detection and Risk Signals + Okta AI and Agentic AI capabilities Platform Engineering + Automation Framework Development + Event-Driven Architectures Governance & Recovery + Identity Governance Concepts + Disaster Recovery Planning + Backup and Recovery Solutions ## Description Shape the future of enterprise identity by engineering, securing, and automating mission-critical workforce identity services that enable secure access across the enterprise.As a senior member of the Identity Platform team, you will drive the design, implementation, operation, and continuous improvement of Okta capabilities that improve security, resiliency, reliability, and user experience. This role combines identity architecture, platform engineering, automation, operational excellence, and technical leadership. You will partner with application teams, infrastructure engineers, cybersecurity, and cloud teams to deliver scalable identity solutions while reducing operational risk and improving service maturity. The ideal candidate brings deep expertise in Okta, modern authentication protocols, identity lifecycle management, cloud security engineering, automation, and incident response, along with a passion for mentoring others and driving continuous improvement. Core Responsibilities: Platform Engineering & Identity Solutions + Design, implement, and maintain enterprise-scale identity solutions leveraging Okta Workforce Identity capabilities. + Lead application onboarding initiatives including SAML, OIDC/OAuth, SCIM provisioning, federation, lifecycle management, and authentication integrations. + Develop scalable identity architectures that improve security, operational efficiency, and end-user experience. + Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments. Automation & Engineering Excellence + Design and implement automation solutions using APIs, scripting, workflows, infrastructure-as-code, and CI/CD pipelines to reduce manual effort and improve service delivery. + Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting. + Drive platform engineering best practices including Git-based deployment models, testing strategies, release management, and configuration standardization. + Continuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness. Operational Reliability & Resiliency + Own platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews. + Participate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues. + Lead root cause analysis activities and implement preventative controls to improve platform stability. + Establish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators. Security, Governance & Compliance + Implement and maintain secure authentication, authorization, and access management controls. + Support audit readiness through development of controls, documentation, evidence collection processes, and governance standards. + Assess and mitigate security risks associated with identity systems, integrations, and cloud-based services. + Drive initiatives that enhance platform security posture through continuous improvement, vulnerability remediation, policy modernization, and threat detection capabilities. Technical Leadership + Serve as a technical leader and trusted advisor for workforce identity services and authentication technologies. + Influence architecture decisions, engineering standards, and operational best practices across teams. + Mentor engineers and support knowledge-sharing initiatives that reduce key-person dependency and improve organizational resiliency. + Collaborate with internal stakeholders, vendors, and cross-functional teams to deliver strategic identity initiatives. Operational Leadership ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Stop Committing Your Secrets - GIt Hooks To The Rescue!](https://www.wearedevelopers.com/videos/573-stop-committing-your-secrets-git-hooks-to-the-rescue) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)