CIAM Senior Architect Manager, VP

State Street; Town of Clifton (NY); On-site; USD 125,000 - 226,000; Full time

Job summary

State Street seeks an experienced CIAM Architect Manager to design patterns for onboarding to a new CIAM platform across lines of business. The role requires deep CIAM architecture experience in large, complex environments and familiarity with IAM protocols (SAML, OAuth, OpenID) and security controls.

You will draft architectures, evaluate current processes against industry standards (NIST SP 800-63, CSF, 800-53), and lead cross-team initiatives within Global Cybersecurity to deliver

Qualifications

• Senior CIAM Architect with 5-7 years of hands-on design experience.
• Proven background in CIAM architectures for large, complex environments.
• Strong knowledge of IAM protocols and security standards.

Responsibilities

• Development of CIAM omni-channel standard patterns and reference architectures.
• Evaluate processes against industry standards such as NIST SP 800-63 and CSF/800-53.
• Identify gaps and develop findings across CIAM program components.
• Collaborate with cross-functional teams within Global Cybersecurity to deliver CIAM solutions.
• Lead multi-vendor IAM integrations (Microsoft, Okta) and vendor governance.

Skills

CIAM Architecture

IAM Protocols

Directories & SSO

APIs & Gateways

MFA / Risk

OpenID / OAuth

NIST SP800-63

Cross-team Collaboration

Tools

Microsoft

Okta

ForgeRock

AWS

Job description

CIAM Architect Manager

We are seekingan experienced Consumer / Customer Identity and Access Management (CIAM) Architect to develop patterns for lines of business to onboard to new CIAM platform. Candidate must have a strong background in designing CIAMarchitecture for large, complex CIAM environments.

GCS CIAM Product Delivery Manager – Vice President (VP-640) Customer Identity and Access Management (CIAM) Role is to draft the architecture of CIAM components across State Street

Key Responsibilities:

• Development of CIAM omni-channel (Digital, Voice, Paper) standard patterns

• Includes identification of and recommendations for leading digital experiences to serve as benchmarks for clients CIAM future state

• Includes anticipated emerging digital experience trends

• Covers the following pattern categories for CIAM:

  • Registration / Onboarding
  • Authentication
  • Authorization
  • Third-party Service/API Access & Authorization
  • Invitation-Based User Registration
  • Multi-Branded User Registration & Authentication
  • User Access Delegation
  • User De-provisioning
  • Helpdesk Processes

• Omnichannel Services “Overlay”

• Evaluation of current processes against the defined industry and leading practices including industry standards such as the National Institute for Standards and Technology (NIST) Special Publication (SP) 800-63; Digital Authentication, NIST Cybersecurity Framework (CSF) and NIST SP 800-53; Security and Privacy Controls.

• Development of findings and gaps based on analysis of current processes against the defined industry and leading practices.

Your team

You’ll be working in the Customer Identity & Access Management Team which is part of Global Cybersecurity (GCS). This role specifically aligns with our External Authentication products which provide solutions for clients globally. Our team consists of highly skilled technical experts across the globe. Your team has an amazing opportunity to make significant positive impact.

Your expertise:

• Senior and experienced CIAM Architect (5-7 years) in creating reference and solution architecture (design pattern diagrams)
• Good understanding of CIAM
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services
• Experience with App Gateways, App Proxies, Live Chat, Chat Bots, Contact Centers, IVRs and Web Portals for CIAM
• Good understanding of MFA, PAM and Risk Based Authentication
• Deep technical understanding of IAM solutions across multiple vendors. Like Microsoft and Okta
• Experience with NIST SP800-63 Digital Authentication Standard
• Ability to work across teams

Plus if you have:

• ForgeRock and/or AWS certifications (e.g., Identity Security Engineer).
• Business outcomes mindset
• Excellent interpersonal communication skills with strong spoken and written English
• Collaborative team worker
• Flexibility to accommodate working across different time-zones

Salary Range:

$125,000 - $226,250 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.