Cloud Security Architect

State Street; Berwyn (PA); Hybrid; USD 90,000 - 158,000; Full time

Benefits offered by this job

Comprehensive benefits program

Job summary

State Street is seeking a Cloud Security Architect to define and govern cloud security architectures across multi-cloud and hybrid-cloud environments. You will partner with cloud engineering, infrastructure, and application teams to implement security controls and ensure secure, compliant solutions that align with enterprise standards.

The role emphasizes leadership in security reviews, risk-based decision-making, and driving Zero Trust and secure-by-design principles across AWS, Azure, and

Qualifications

• Degree or equivalent in Computer Science, Cybersecurity, IT, Engineering, or related field.
• 8+ years leading large-scale cybersecurity architecture, engineering, or security transformation in global environments.
• Experience designing enterprise-scale cloud security architectures across AWS, Azure, and/or GCP.
• Deep expertise in cloud security, IAM, data protection, encryption, and infrastructure security.
• Strong knowledge of cloud-native architectures, containers, Kubernetes, DevSecOps, CI/CD, and IaC.
• Experience developing enterprise security standards, governance, and secure-by-design practices.
• Professional certs such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer/Architect, TOGAF, SABSA are desirable.
• Experience in financial services or regulated industries is preferred.

Responsibilities

• Design and maintain cloud security architectures, standards, patterns, and reference models across multi-cloud and hybrid-cloud environments.
• Partner with cloud engineering, infrastructure, and application teams to integrate security controls.
• Lead security architecture reviews for cloud transformation initiatives and cloud-native apps.
• Define and govern cloud security capabilities including IAM, network security, data protection, and logging.
• Identify cloud security risks and develop mitigation aligned with risk management and regulations.
• Promote Zero Trust, secure-by-design, and cloud-native security principles.
• Evaluate emerging cloud security technologies and trends for future-state architecture strategies.

Skills

Cloud security architecture

Cloud-native technologies

Modern infrastructure platforms

AWS security services

Azure security services

GCP security services

Analytical thinking

Risk-based decision-making

Stakeholder management

Communication

Education

Degree in Computer Science or related

8+ years cybersecurity architecture leadership

Certifications: CISSP, CCSP, AWS Security Specialty etc.

Experience in financial services or regulated industries

Tools

Kubernetes

Terraform

CI/CD tools

Job description

Who We Are Looking For

We are looking for a Cloud Security Architect. You will be responsible for defining, implementing, and governing cloud security architectures, standards, and security controls across public cloud, private cloud, and SaaS environments. You will partner with cloud engineering, application development, infrastructure, cybersecurity, and business stakeholders to deliver secure, resilient, and scalable cloud solutions that support the firm's digital transformation initiatives.

Why This Role Is Important To Us

The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's cloud platforms, applications, data, and technology services. As the firm's adoption of cloud technologies continues to expand, this role is responsible for ensuring cloud environments are designed and operated securely, aligned with regulatory requirements, enterprise standards, and industry best practices.

What You Will Be Responsible For

As a Cloud Security Architect, you will:

• Design and maintain cloud security architectures, standards, patterns, and reference models across multi-cloud and hybrid-cloud environments.
• Partner with cloud engineering, infrastructure, and application teams to integrate security controls into cloud platforms and services.
• Lead security architecture reviews for cloud transformation initiatives, cloud-native applications, containers, Kubernetes platforms, and SaaS solutions.
• Define and govern cloud security capabilities including identity and access management, network security, data protection, encryption, logging, monitoring, and security automation.
• Identify cloud security risks and develop mitigation strategies aligned with enterprise risk management and regulatory requirements.
• Drive adoption of Zero Trust, secure-by-design, and cloud-native security principles.
• Evaluate emerging cloud security technologies and industry trends to support future-state architecture strategies.

What We Value

These skills will help you succeed in this role

• Strong expertise in cloud security architecture, cloud-native technologies, and modern infrastructure platforms.
• Deep understanding of AWS, Microsoft Azure, and Google Cloud security services and architectures.
• Strong analytical, problem-solving, and risk-based decision-making skills.
• Experience working on large-scale cloud transformation initiatives within complex global organizations.
• Strong communication and stakeholder management skills with the ability to influence engineering, architecture, and business teams.

Education & Preferred Qualifications

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 8 years or more of experience leading large-scale cybersecurity architecture, engineering, security operations, or technology transformation functions in complex, global environments, with at least 8 years of cybersecurity experience preferred.
• Demonstrated experience designing and implementing enterprise-scale cloud security architectures across AWS, Azure, and/or Google Cloud Platform environments.
• Deep expertise in cloud security, security architecture, network security, identity and access management, data protection, encryption, and infrastructure security.
• Strong understanding of cloud-native architectures, containers, Kubernetes, DevSecOps, CI/CD pipelines, and Infrastructure as Code (IaC).
• Experience developing enterprise security standards, governance frameworks, architecture patterns, and secure-by-design practices.
• Professional certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, Azure Solutions Architect, TOGAF, SABSA, or equivalent certifications are highly desirable.
• Experience within financial services or other highly regulated industries is preferred.

Additional Requirements

• Experience supporting enterprise cloud migration and modernization initiatives.
• Ability to collaborate effectively with cloud engineering, infrastructure, security, risk, and business teams globally.
• Limited travel may be required based on business needs.

Work Requirement

Hybrid: Expected to work in accordance with State Street's hybrid work model.

Shift: Standard business hours with flexibility to support global stakeholders across multiple time zones.

Salary Range

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short-term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax-advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.