Who we are looking for

　　The Privileged Access Management Cloud Architect will work in the corporate information security organization.They will analyze, develop, and build processes and technology, to ensure timely delivery of PAM services for multi-cloud environment The PAM Cloud Architect is expected to design and define the architecture standards, align with multi-cloud strategy, drive product and platform delivery.

　　What you will be responsible for

　　As PAM Cloud Architect you will

　　• Development of the Privileged Access Cloud Architecture.

　　• Lead projects to develop and deliver new security features and expand coverage to new use cases and achieve cost efficiencies.

　　• Anticipate and solution emerging cloud patterns, SaaS and advanced computing patterns.Extract requirements and execute on timely delivery of solutions.

　　• Assure proper Cyber Defense posture for privileged access in a zero trust model with global distributed cloud base computing model.

　　• Implementing Just In Time Access solutions, Least Privileged Access

　　• Designing scalable, secure cloud access model with Software Defined Networks and Network Security Groups.

　　• Provide security consultation on internal projects focusing on business needs and how data is transmitted internally and externally.

　　• Manage aspects of product procurement, business case development, license management, trusted third party management of services and software contracts.

　　• Provides regular reports to leadership regarding security, capacity, usage, and licensing

　　• Provide roadmaps and plans for leadership to have clear transparency on KPI/KRI.

　　• Design and prepare documentation to allow application teams to understand use-case, patterns and capability delineation.

　　What we value

　　These skills will help you succeed in this role

　　• Bachelor's Degree in Information Technology, Computer Science or other related fields.Master's degree preferred

　　• Industry certifications in cyber or identity security attesting to broad knowledge of security best practices and design.

　　• 5-8+ years administering and maintaining Privileged Access Management (PAM)

　　• Experience working with SIEM integration (Splunk) and UBA/Threat Analytics.

　　• Background working in a large IT organization with responsibility for supporting the technology and processes in the Privileged Access Management domain and controls program, preferably in a financial services organization

　　• Experience with server hardening and advanced designing secure platforms.

　　• Significant experience administering tier zero identity infrastructure that provides AAA services such as Active Directory, Azure Active Directory, and RSA.

　　• Experience with Service Life Cycle or Agile Frameworks

　　• Good verbal and written communication skills

　　• Advanced research, analytical, and problem-solving skills

　　• Effective in leading resources to deliver large goals and objectives

　　• Practical skills presenting findings, conclusions, alternatives, and information clearly and concisely

　　• Experience multi-cloud architecture with Amazon, and Azure including coexistence of cloud native PAM tools with respective gaps.

　　• Strong knowledge of how PAM integrates with common resources such as Windows, Linux/UNIX, VMWare, Azure, SQL/Oracle/DB2 database systems, Network appliances, and Mainframe

　　Additional requirements

　　Why this role is important to us

　　Our technology function, Global Technology Services (GTS), is vital to State Street and is the key enabler for our business to deliver data and insights to our clients. We're driving the company's digital transformation and expanding business capabilities using industry best practices and advanced technologies such as cloud, artificial intelligence and robotics process automation.

　　We offer a collaborative environment where technology skills and innovation are valued in a global organization. We're looking for top technical talent to join our team and deliver creative technology solutions that help us become an end-to-end, next-generation financial services company.

　　Join us if you want to grow your technical skills, solve real problems and make your mark on our industry.

　　About State Street

　　What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation we're making our mark on the financial services industry. For more than two centuries, we've been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

　　Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary in locations, but you may expect generous medical care, insurance and savings plans among other perks. You'll have access to flexible Work Program to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

　　Inclusion, Diversity and Social Responsibility. We truly believe our employees' diverse backgrounds, experiences and perspective are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome the candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift program and access to employee networks that help you stay connected to what matters to you.

　　State Street is an equal opportunity and affirmative action employer.

　　Discover more at StateStreet.com/careers

　　Salary Range:

　　$110,000 - $185,000 Annual

　　The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.