Enterprise Integration Security Architect
State Street1 day ago
Base Salary
$120k - $203k/yr
Responsibilities
- Design and maintain security architectures, standards, and reference patterns for APIs, messaging platforms, event streaming, file transfers, and third-party integrations.
- Conduct security architecture reviews across cloud, SaaS, hybrid, and on-premises environments.
- Define security requirements for API gateways, service-to-service communications, machine identities, partner connectivity, and integration platforms.
- Provide expertise on authentication, authorization, encryption, tokenization, secrets management, and secure integration patterns.
- Partner with engineering and architecture teams to embed security controls into enterprise integration platforms and services.
- Assess integration security risks and recommend mitigations aligned with enterprise security standards and regulatory requirements.
- Evaluate emerging integration technologies and industry trends to support secure future-state architecture.
- Support enterprise API programs, cloud transformation initiatives, and third-party connectivity solutions.
Requirements
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
- 14 or more years of experience in security architecture, application security, integration architecture, middleware technologies, or related technology disciplines, with at least 8 years of hands-on cybersecurity experience preferred.
- Demonstrated experience designing and securing enterprise integration platforms, APIs, messaging environments, and cloud-native services.
- Deep expertise in API security, OAuth, OpenID Connect, SAML, JWT, mTLS, PKI, secrets management, and machine identity security.
- Experience with IBM MQ, Kafka, Solace, Event Hubs, RabbitMQ, MuleSoft, Apigee, Kong, Azure Integration Services, or equivalent platforms.
- Strong understanding of cloud-native architectures, microservices, containers, Kubernetes, serverless technologies, and modern application architectures.
- Experience conducting security architecture reviews, threat modeling, and risk assessments for integration and data exchange solutions.
- Knowledge of Zero Trust principles, data protection requirements, encryption technologies, and secure communication architectures.
- Professional certifications such as CISSP, CCSP, GIAC, TOGAF, SABSA, AWS Security Specialty, or Azure Security Engineer are highly desirable.
- Experience in financial services or another highly regulated industry is preferred.
- Ability to collaborate effectively with application, cloud, infrastructure, engineering, and cybersecurity teams in a global environment.
Benefits
- Hybrid work under State Street’s hybrid work model.
- Standard business hours with flexibility to support global stakeholders across multiple time zones.
- Limited travel may be required based on business needs.
- Retirement savings plan with company match; life, medical, dental, vision, and disability insurance options.
- Paid time off, family-care support, Employee Assistance Program, and access to tax-advantaged savings plans.
- Eligibility for incentive compensation and annual performance-based awards.
- Inclusive development opportunities, flexible work-life support, paid volunteer days, and employee networks.
Tech Stack
Categories
About State Street
State Street is a global custodian bank and asset manager serving institutional investors with investment servicing, fund accounting, trading/FX, data, and index/active strategies. Its products include State Street Global Advisors’ funds and ETFs, the Charles River Investment Management Solution, and the front-to-back State Street Alpha platform. Founded in 1792 and headquartered in Boston, the company is publicly traded on the NYSE (ticker: STT) and operates across major markets worldwide.