Senior Specialist, Lead Zero Trust Identity Security Engineering

{"description": " Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions. Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, dat

{"description": " Duties and Responsibilities: Provide technical and delivery leadership for the Application Security - DevSecOps Team, spanning API, DAST, container security, and emerging application security capabilities. Partner with individual domain leads (API, DAST, Container, etc.) to balance priorities, unblock work, and ensure consistent collaboration and execution across the team. Support the manager through execution, planning, stakeholder communication, and operational leadership;

{"description": " Core Responsibilities Implement and manage the privileged access lifecycle for Windows and Linux servers. Onboard, classify, and manage privileged accounts, including local admin, service accounts, and break-glass identities. Configure credential rotation policies and enforce strong authentication standards. Deploy and maintain Just-in-Time (JIT) and Just-Enough Access (JEA) models. Integrate PAM with cloud-native identity frameworks such as AWS IAM Roles, Azure Managed Identit

{"description": " Responsibilities: Design, implement, test, and maintain application security tooling and integrations across the software development lifecycle, with a focus on reliability, scalability, and performance. Build, enhance, and operate CI/CD pipeline integrations for application security scanning, ensuring consistent execution and minimal impact to developer workflows. Develop and maintain monitoring, alerting, and operational controls for application security platforms to ensure a