- Location
- Malvern, PA, United States of America · Charlotte, NC · Dallas/Ft. Worth, TX
- Workplace
- Hybrid
- Type
- Full-time
- Department
- Engineering
- Experience
- 5+ years
- Visa
- Not sponsored
- Source
- Workday
Description
What You'll Do
- Design, build, and maintain offensive security platforms and cloud environments.
- Engineer primarily in Microsoft Azure, with additional support across AWS.
- Develop Infrastructure-as-Code using Terraform, Bicep/ARM, CloudFormation, or similar tools.
- Automate provisioning, deployment, patching, and lifecycle management using Python, PowerShell, Bash, Go, or similar languages.
- Build and support CI/CD pipelines, containerized solutions, and reusable deployment patterns.
- Deploy and integrate security tooling used for offensive testing, research, and automation.
- Implement cloud security controls, access management, monitoring, logging, and platform hardening.
- Collaborate with security practitioners to deliver scalable engineering solutions that enable offensive security operations.
Required Qualifications
- 5+ years of experience in Security Engineering, Cloud Engineering, DevSecOps, Platform Engineering, Infrastructure Engineering, or a related field.
- Strong hands-on experience designing and operating Microsoft Azure environments.
- Working knowledge of AWS services, networking, IAM, and security concepts.
- Experience with Infrastructure-as-Code tools such as Terraform, Bicep, or ARM.
- Experience automating solutions using Python, PowerShell, Bash, Go, or similar languages.
- Experience with Git-based development practices and CI/CD pipelines.
- Knowledge of cloud networking, IAM, secrets management, logging, monitoring, and security controls.
- Strong understanding of Windows, Linux, networking, and cloud infrastructure fundamentals.
- Familiarity with Docker, Kubernetes, or other container technologies.
Preferred Qualifications
- Experience supporting Red Team, Purple Team, penetration testing, or security research functions.
- Experience building security labs, cyber ranges, or isolated testing environments.
- Familiarity with offensive security tools such as Kali Linux, Burp Suite, BloodHound, Metasploit, Sliver, or similar platforms.
- Experience developing internal platforms, APIs, or self-service capabilities.
- Knowledge of Microsoft Entra ID, Azure RBAC, AWS IAM, and workload identities.
- Experience with AI-enabled security automation.
- Relevant Azure, AWS, Terraform, or security certifications.
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.About Vanguard
At Vanguard, we don't just have a mission—we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.