Senior Cloud Security Architect

Description

Who We Are Looking For

We are looking for a Senior Cloud Security Architect. You will be responsible for defining, implementing, and governing cloud security architectures, standards, and security controls across public cloud, private cloud, and SaaS environments. You will partner with cloud engineering, application development, infrastructure, cybersecurity, and business stakeholders to deliver secure, resilient, and scalable cloud solutions that support the firm's digital transformation initiatives.

Why This Role Is Important To Us

The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's cloud platforms, applications, data, and technology services. As the firm's adoption of cloud technologies continues to expand, this role is responsible for ensuring cloud environments are designed and operated securely, aligned with regulatory requirements, enterprise standards, and industry best practices.

What You Will Be Responsible For

As a Senior Cloud Security Architect, you will:

Design and maintain cloud security architectures, standards, patterns, and reference models across multi-cloud and hybrid-cloud environments.

Partner with cloud engineering, infrastructure, and application teams to integrate security controls into cloud platforms and services.

Lead security architecture reviews for cloud transformation initiatives, cloud-native applications, containers, Kubernetes platforms, and SaaS solutions.

Define and govern cloud security capabilities including identity and access management, network security, data protection, encryption, logging, monitoring, and security automation.

Identify cloud security risks and develop mitigation strategies aligned with enterprise risk management and regulatory requirements.

Drive adoption of Zero Trust, secure-by-design, and cloud-native security principles.

Evaluate emerging cloud security technologies and industry trends to support future-state architecture strategies.

What We Value

These skills will help you succeed in this role:

Strong expertise in cloud security architecture, cloud-native technologies, and modern infrastructure platforms.

Deep understanding of AWS, Microsoft Azure, and Google Cloud security services and architectures.

Strong analytical, problem-solving, and risk-based decision-making skills.

Experience working on large-scale cloud transformation initiatives within complex global organizations.

Strong communication and stakeholder management skills with the ability to influence engineering, architecture, and business teams.

Education & Preferred Qualifications

Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.

14 years or more of experience leading large-scale cybersecurity architecture, engineering, security operations, or technology transformation functions in complex, global environments, with at least 8 years of cybersecurity experience preferred.

Demonstrated experience designing and implementing enterprise-scale cloud security architectures across AWS, Azure, and/or Google Cloud Platform environments.

Deep expertise in cloud security, security architecture, network security, identity and access management, data protection, encryption, and infrastructure security.

Strong understanding of cloud-native architectures, containers, Kubernetes, DevSecOps, CI/CD pipelines, and Infrastructure as Code (IaC).

Experience developing enterprise security standards, governance frameworks, architecture patterns, and secure-by-design practices.

Professional certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, Azure Solutions Architect, TOGAF, SABSA, or equivalent certifications are highly desirable.

Experience within financial services or other highly regulated industries is preferred.

Additional Requirements

Experience supporting enterprise cloud migration and modernization initiatives.

Ability to collaborate effectively with cloud engineering, infrastructure, security, risk, and business teams globally.

Limited travel may be required based on business needs.

Work Requirement

Hybrid: Expected to work in accordance with State Street's hybrid work model.

Shift: Standard business hours with flexibility to support global stakeholders across multiple time zones.

Conditions

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home .

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.