CIAM Senior Architect Manager, VP

State Street; Clifton (NJ); On-site; USD 125,000 - 226,000; Full time

Job summary

State Street is seeking an experienced CIAM Architect Manager to design patterns for onboarding to a new CIAM platform. The role focuses on enterprise CIAM architecture across large, complex environments and drafts architecture across CIAM components.

You will lead design efforts for omni-channel CIAM patterns, onboarding workflows, authentication/authorization, and third-party access while aligning with NIST standards and industry best practices.

Qualifications

• Senior CIAM Architect with 5–7 years in reference and solution architecture (design pattern diagrams).
• Strong CIAM understanding with hands-on knowledge of IAM protocols (SAML, SPML, XACML, SCIM, OpenID, OAuth).
• Extensive experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.
• Experience with CIAM delivery across multi-vendor environments (Microsoft, Okta).
• Familiarity with MFA, PAM, and risk-based authentication concepts.
• Knowledge of NIST SP 800-63 Digital Authentication standards.
• Ability to work across teams and influence security architecture decisions.
• Experience with app gateways, proxies, live chat, contact centers and web portals for CIAM.
• Ability to design omni-channel CIAM patterns and onboarding workflows.

Responsibilities

• Develop CIAM omni-channel standard patterns for onboarding to the CIAM platform.
• Define patterns for registration, authentication, authorization and third-party access.
• Evaluate current processes against industry standards (NIST CSF, NIST SP 800-53).
• Draft findings and gaps and present them to leadership.
• Collaborate with cross-functional teams across lines of business to implement CIAM patterns.

Skills

CIAM architecture

IAM protocols

SSO & Federation

API gateways

NIST SP 800-63

MFA & risk-based auth

Cross-team collaboration

Vendor IAM solutions

Solution architecture patterns

Job description

CIAM Architect Manager

We are seeking an experienced Consumer / Customer Identity and Access Management (CIAM) Architect to develop patterns for lines of business to onboard to new CIAM platform. Candidate must have a strong background in designing CIAM architecture for large, complex CIAM environments. GCS CIAM Product Delivery Manager – Vice President (VP-640) Customer Identity and Access Management (CIAM) Role is to draft the architecture of CIAM components across State Street.

Key Responsibilities

• Development of CIAM omni-channel (Digital, Voice, Paper) standard patterns


• Includes identification of and recommendations for leading digital experiences to serve as benchmarks for clients CIAM future state


• Includes anticipated emerging digital experience trends


• Covers the following pattern categories for CIAM:
  
  
  
  • Registration / Onboarding
  
  
  • Authentication
  
  
  • Authorization
  
  
  • Third-party Service/API Access & Authorization
  
  
  • Invitation-Based User Registration
  
  
  • Multi-Branded User Registration & Authentication
  
  
  • User Access Delegation
  
  
  • User De-provisioning
  
  
  • Helpdesk Processes
  
  
  • Omnichannel Services \"Overlay\"
  
  
  • Evaluation of current processes against the defined industry and leading practices including industry standards such as the National Institute for Standards and Technology (NIST) Special Publication (SP) 800-63; Digital Authentication, NIST Cybersecurity Framework (CSF) and NIST SP 800-53; Security and Privacy Controls.
  
  
  • Development of findings and gaps based on analysis of current processes against the defined industry and leading practices.
  
  
  
  

Your Expertise

• Senior and experienced CIAM Architect (5-7 years) in creating reference and solution architecture (design pattern diagrams)


• Good understanding of CIAM


• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth


• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services


• Experience with App Gateways, App Proxies, Live Chat, Chat Bots, Contact Centers, IVRs and Web Portals for CIAM


• Good understanding of MFA, PAM and Risk Based Authentication


• Deep technical understanding of IAM solutions across multiple vendors. Like Microsoft and Okta


• Experience with NIST SP800-63 Digital Authentication Standard


• Ability to work across teams

Plus If You Have

• ForgeRock and/or AWS certifications (e.g., Identity Security Engineer).


• Business outcomes mindset


• Excellent interpersonal communication skills with strong spoken and written English


• Collaborative team worker


• Flexibility to accommodate working across different time-zones

Salary Range

$125,000 - $226,250 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans. For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Job ID: R-793274