Hybrid Cloud API & Integration Security Architect

State Street; Devon (PA); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K with company match

Paid time off

Health/Dental/Vision coverage

Job summary

State Street is seeking an Enterprise Integration Security Architect to design and govern security architectures for APIs, messaging platforms, event-driven architectures, and third‑party connectivity. You will partner with application development, cloud engineering, infrastructure, data, and cybersecurity teams to implement secure, resilient integration patterns across the enterprise.

Responsibilities include defining security requirements for gateways and service communications, reviewing

Qualifications

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 14+ years of experience in security architecture, application security, integration architecture, middleware technologies, or related tech with at least 8 years of hands-on cybersecurity experience preferred.
• Demonstrated experience designing and securing enterprise integration platforms, APIs, messaging environments, and cloud-native services.
• Deep expertise in API security, OAuth, OpenID Connect, SAML, JWT, mTLS, PKI, secrets management, and machine identity security.
• Experience with enterprise messaging/integration technologies like IBM MQ, Kafka, Solace, Event Hubs, RabbitMQ, MuleSoft, Apigee, Kong, Azure Integration Services or equivalents.
• Strong understanding of cloud-native architectures, microservices, containers, Kubernetes, serverless, and modern app architectures.
• Experience with security architecture reviews, threat modeling, and risk assessments for integration/data exchange solutions.
• Knowledge of Zero Trust, data protection requirements, encryption technologies, secure communication architectures.
• Certifications are highly desirable; financial services experience preferred.

Responsibilities

• Design and maintain security architectures, standards, and reference patterns for APIs, messaging, event streaming, file transfers, and third‑party integrations.
• Conduct security architecture reviews for enterprise integration solutions across cloud, SaaS, hybrid, and on‑prem environments.
• Define security requirements for API gateways, service‑to‑service communications, machine identities, partner connectivity, and integration platforms.
• Provide SME on authentication, authorization, encryption, tokenization, secrets management, and secure integration design patterns.
• Partner with engineering and architecture teams to embed security controls into enterprise integration platforms and services.
• Assess integration security risks and recommend mitigation aligned with enterprise security standards and regulatory requirements.
• Evaluate emerging integration technologies and industry trends to support future‑state architecture and secure technology adoption.

Skills

API security

Integration architecture

Threat modeling

Zero Trust

Risk assessment

Education

Degree in Computer Science / Cybersecurity

Professional certifications (CISSP / CCSP / TOGAF)

Tools

IBM MQ

Kafka

Solace

Event Hubs

RabbitMQ

MuleSoft

Apigee

Kong

Azure Integration Services

Job description

State Street is seeking an Enterprise Integration Security Architect to design and govern security architectures for APIs, messaging platforms, event-driven architectures, and third‑party connectivity. You will partner with application development, cloud engineering, infrastructure, data, and cybersecurity teams to implement secure, resilient integration patterns across the enterprise.

Responsibilities include defining security requirements for gateways and service communications, reviewing