Cloud Platform Engineer - AuthN/Z Statestreet · Burlington Massachusetts · Platform & Infrastructure
Listed on 2026-10-18
-
IT/Tech
Systems Engineer, Cybersecurity, Cloud Computing: Infrastructure & Operations, Information Security & Data Protection
Who we are looking for
State Street Alpha is seeking a highly motivated Security Engineer to join our Cloud Platform Engineering team. In this role, you’ll help to design and implement solutions for Customer Identity and Access Management (CIAM) in the cloud. The candidate will be responsible for defining and automating processes to optimize access management using the Customer Identity Platform and related technologies.
Why this role is important to us
The team you will be joining is a part of Charles River Development (or CRD), that became a part of State Street in 2018. CRD helps create enterprise investment management software solutions for large institutions in the areas of institutional investment, wealth management and hedge funds. Together we have created first open front-to-back platform - State Street Alpha, that was launched in 2019.
Join us if delivering next generation infrastructure, using emerging technologies sounds like a challenge you are up for.
What you will be responsible for
As a Cloud Identity Engineer, you will:
Develop, implement, and monitor automated solutions for managing CIAM at scale for the workforce, customers, and partners
Evolve identity lifecycle management processes for humans and automation accounts
Evaluate and implement new technologies to improve the strength of authentication
Test and operationalize new features that become available on existing platforms
Proactively identify opportunities and gaps around technologies and processes
Fine-tune advanced security features such as Conditional Access Policies and Customer Authentication Extensions
Assist external auditors with questions related to CIAM
Manage third party vendor engagements such as auditors and penetration testers
Participate in projects to enhance Cloud Security beyond the domain of CIAM
What we value
Strong process development and automation skills using Python and/or Power Shell
Practical knowledge needed to author modular and maintainable scripts and utilities
Customer identity and access management experience in a regulated SaaS environment
Practical understanding of core identity technologies (AD, Entra , Privileged Access Management) and their associated governance, lifecycle management, automation and delivery
Ability to lead and work well with multiple priorities, and effectively handle concurrent demands to prioritize responsibilities
Ability to formulate clear strategy, present and gain support
Ability to effectively integrate, contribute and overlap with other functions including cloud/enterprise architecture, compliance, risk, engineering, developers
Ability to formulate objectives with clear business value and demonstrate progress along the way
Ability to communicate complex and innovative concepts with proven experience driving decision making across different stakeholder groups
Ability to be self-directed and to proactively anticipate problems and seek opportunities
A champion for continuous improvement
Experience with infrastructure systems, security assessments, and security processes is a bonus.
Education & Preferred Qualifications
5 to 10 Years Related work experience in roles of increasing responsibility/influence governing and managing enterprise cloud and/or infrastructure technologies
Bachelor’s degree in Computer Science, Information Systems, or related field
Salary Range:
$90,000 - $157,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).