API & Enterprise Integration Security Architect

State Street; Princeton (NJ); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K with company match

Medical/Dental/Vision insurance

Paid time off

Employee Assistance Program

Job summary

State Street is seeking an Enterprise Integration Security Architect to design and govern security architectures for enterprise integrations, APIs, messaging platforms, and event‑driven patterns. You will partner with application development, cloud engineering, infrastructure, data, and cybersecurity colleagues to implement secure, scalable integration patterns across the enterprise.

The role emphasizes security controls, threat modeling, and risk mitigations across cloud and on‑prem

Qualifications

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 14 years or more of experience in security architecture and related disciplines with at least 8 years in hands-on cybersecurity preferred.
• Demonstrated experience designing and securing enterprise integration platforms, APIs, messaging environments, and cloud-native services.
• Deep expertise in API security, OAuth, OpenID Connect, SAML, JWT, mTLS, PKI, secrets management, and machine identity security.
• Experience with enterprise messaging and integration technologies such as IBM MQ, Kafka, Solace, Event Hubs, RabbitMQ, MuleSoft, Apigee, Kong, Azure Integration Services, or equivalent.

Responsibilities

• Design and maintain security architectures, standards, and reference patterns for APIs, messaging platforms, event streaming services, file transfers, and third‑party integrations.
• Conduct security architecture reviews for enterprise integration solutions across cloud, SaaS, hybrid, and on‑premises environments.
• Define security requirements for API gateways, service‑to‑service communications, machine identities, partner connectivity, and integration platforms.
• Provide subject matter expertise on authentication, authorization, encryption, tokenization, secrets management, and secure integration design patterns.
• Partner with engineering and architecture teams to embed security controls into enterprise integration platforms and services.
• Assess integration security risks and recommend mitigation strategies aligned with enterprise security standards and regulatory requirements.
• Evaluate emerging integration technologies and industry trends to support future‑state architecture and secure technology adoption.

Skills

Security strategy

Risk assessment

Security architecture

Threat modeling

Communication with stakeholders

Certifications (CISSP/CASP/TOGAF)

Education

Bachelor's degree in Computer Science or related field

Tools

IBM MQ

Kafka

Solace

Event Hubs

MuleSoft

Azure Integration Services

Job description

State Street is seeking an Enterprise Integration Security Architect to design and govern security architectures for enterprise integrations, APIs, messaging platforms, and event‑driven patterns. You will partner with application development, cloud engineering, infrastructure, data, and cybersecurity colleagues to implement secure, scalable integration patterns across the enterprise.

The role emphasizes security controls, threat modeling, and risk mitigations across cloud and on‑prem