V

Vanguard

Manages investment funds and retirement savings

Head of Client Identity Engineering

Engineering LeadershipConfirmed live in the last 24 hours
Full-timeNo salary listed

About the Job

Requirements

  • Extensive experience leading global client identity, digital identity, cybersecurity, platform, or application engineering organizations.
  • Deep technical knowledge of modern identity architecture, identity proofing, authentication, authorization, federation, OAuth, OpenID Connect, passkeys, APIs, distributed systems, cloud platforms, and secure software engineering.
  • Strong understanding of cloud infrastructure, client identity and access management, fraud prevention, privacy, regulatory obligations, resilience, observability, and site reliability engineering.
  • Experience governing machine and agentic artificial intelligence identities, delegated access, consent, dynamic authorization, and auditable autonomous interactions.
  • Proven ability to recruit, develop, and retain senior architects, engineers, engineering managers, and technical leaders across global locations.
  • Exceptional executive communication, stakeholder influence, financial stewardship, vendor management, and change leadership.
  • Minimum 12 years of experience in cloud security engineering or related information technology infrastructure roles, with demonstrated expertise in leading security architecture and operations at scale.
  • Bachelor's degree in computer science, engineering, cybersecurity, or a related discipline.
  • Experience working in Agile environments, with tools such as JIRA and Confluence, and driving continuous improvement in security operations.
  • Experience leading large-scale cloud-based platforms and engineering teams in highly regulated environments.
  • Strong understanding of cybersecurity principles, fraud prevention, privacy controls, resilience, observability, and secure software engineering practices.
  • Proven ability to lead global engineering organizations and deliver complex, enterprise-wide technology initiatives.
  • Demonstrated success building, mentoring, and retaining high-performing engineering teams.
  • Exceptional executive communication, stakeholder management, and strategic influencing skills.

Responsibilities

  • Define and execute the global client identity engineering strategy, target architecture, multiyear roadmap, and investment priorities.
  • Set the technical vision for identity proofing, authentication, authorization, federation, consent, profile management, digital fraud controls, and identity lifecycle capabilities.
  • Represent the organization in industry forums and strategic partnerships; anticipate market, regulatory, threat, and technology shifts and translate them into actionable engineering priorities.
  • Advise senior executives on identity risk, client experience, platform modernization, resilience, and emerging opportunities.
  • Lead and develop globally distributed engineering teams accountable for architecture, software development, platform engineering, reliability, testing, implementation, and production support.
  • Deliver complex, large-scale global identity programs through strong product, architecture, engineering, security, risk, and business partnerships.
  • Establish reusable platforms, application programming interfaces, software development kits, automation, observability, and engineering standards that accelerate adoption across markets and channels.
  • Create an operating model that enables follow-the-sun delivery, clear ownership, consistent quality, effective capacity management, and rapid resolution of critical issues.
  • Build a high-performing engineering culture centered on technical excellence, accountability, inclusion, continuous learning, and measurable outcomes.
  • Lead rapid experimentation, prototyping, threat modeling, and evidence-based evaluation of emerging technologies and standards.
  • Convert successful experiments into scalable solutions using disciplined architecture governance, secure engineering, reliability testing, and production adoption plans.
  • Develop intellectual property, technical publications, external partnerships, and engineering communities that strengthen industry credibility and attract top talent.
  • Engineer platforms for high availability, horizontal scalability, regional resilience, graceful degradation, disaster recovery, and secure failover.
  • Embed security, privacy, regulatory, accessibility, and data-minimization requirements throughout the engineering lifecycle.
  • Strengthen defenses against account takeover, credential compromise, social engineering, identity fraud, session abuse, and artificial intelligence-enabled threats.
  • Define service-level objectives, operational readiness criteria, incident response practices, and continuous control validation for critical identity services.

Desired Qualifications

  • An advanced degree.

About the Company

Vanguard

Manages investment funds and retirement savings

Vanguard manages mutual funds, exchange-traded funds, and retirement investments for individuals, financial advisers, and institutions. Its Vanguard 500 Index Fund gives investors exposure to large U.S. companies by tracking the S&P 500, while its lineup also includes actively managed stock and bond funds. Clients invest through brokerage and retirement accounts, workplace plans, or advisers, and advisory services build and maintain portfolios around their goals. Fund expenses and advisory fees pay for investment management and account services, with advisory charges based on the assets managed. Founded in 1975, Vanguard is headquartered in Malvern, Pennsylvania, United States.

Company size
10,001+
Company stage
Debt Financing
Total funding
$4B
Headquarters
Malvern, PA
Founded
1975

Recently Posted Jobs

Explore more opportunities at Vanguard

See more jobs