Identity and Access Management Engineer - AVP
Listed on 2026-01-05
-
IT/Tech
Systems Engineer, Cybersecurity
Identity and Access Management Engineer - AVP
Join to apply for the Identity and Access Management Engineer - AVP role at State Street
Who We Are Looking ForWe are looking for an Identity and Access Management Engineer, Assistant Vice President reporting directly to the IAM PKI Operations and Engineering, Vice President, with skillful experience in public key infrastructure (PKI) and cryptographic key management and excellent intellectual and analytical capabilities, entrepreneurial problem‑solving skills, strong communications, and influencing capabilities. You will collaborate with lead engineers and architects to develop, implement and maintain public key infrastructure and PKI management solutions.
The candidate will work on integrating PKI management systems within a complex collection of enterprise applications, public and private cloud environments, and Dev Ops workflows. The candidate will implement PKI automation and integrated solutions across the enterprise.
The team you will be joining is a part of Identity and Access Management, a function that is vital to the company as it encompasses a broad range of responsibilities including CIAM security, design and resiliency.
What You Will Be Responsible For Thought leadership and Advisory- Be part of long‑term security strategy development and execution.
- Define user cases and IAM requirements for business evolving direction from private, public, hybrid cloud, and partners directions.
- Work with business and architect groups, lead the future state of scalable IAM architecture change journey and building block for adaptive identity framework.
- Evaluate technology products/services that align with the roadmap supporting evolving business IAM demands.
- Engage with, influence all levels of the organization, drive collaboration and trust, and ensure practical strategic priorities.
- Oversee implementation of multiple key initiatives, working closely with line management responsible for executing change; define associated change management imperatives and required resources.
- Work closely with functional areas at State Street to develop plans and materials related to standardized security non‑functional requirements and validation process.
- Participate in IAM design process governance processes, ensuring regular communication and coordination of initiatives across the cross‑functional teams.
- Deliver scalable IAM solutions aligned with Zero trust building blocks, scalable, resilient cyber services architecture, and monitoring infrastructure. To enable State Street to have a world‑class capability to effectively address the Bank’s growing business operations’ increasingly complex and rapidly evolving security needs.
- Demonstrated experience developing and implementing large‑scale change initiatives.
- Strong communication skills to promote critical wins and new behaviors throughout the organization.
- Collaborative work style with the ability to effectively interact with and earn the trust of peers, CTO, development teams across the organization.
- Self‑starter with a keen sense of ownership and commitment to work, and passion for delivering results.
Preferred Qualifications
- Bachelor’s degree in a technical field is required
- PKI infrastructure, security protocols, HSM, Secrets Vault.
- MFA, Privileged access management.
- Access controls using Active Directory, AAD, IDP, and SSO.
- Access Management (RBAC, ABAC workflows), Privacy and Governance.
- Designing and understanding DR resilience challenges.
- 3‑5 years of experience working with KMS, CMS architecture.
- 3‑5 years of System Administration of Windows, Unix/Linux.
- 3‑5 years of experience in infrastructure (security/systems/network) engineering and/or development.
- Experience developing executive‑level reporting and communications.
- Experience working in large complex environments (financial services a plus).
- Quincy (MA) – John Adams Building.
- 40 hours – Standard Work Shift.
- Hybrid – 4 days in office, 1 day remote.
$90,000 – $157,500 Annual. The range quoted above applies to the role in the primary location specified. If…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).