Senior Data Security Architect — Cloud & Data Protection

State Street; Quincy (MA); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K with company match

Health insurance

Paid time off

Employee Assistance Program

Job summary

State Street is seeking a Senior Data Security Architect to design, review, and govern data security architectures across cloud, on-premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, infrastructure, and cybersecurity teams to embed protections throughout the data lifecycle and ensure compliance with regulatory requirements.

This role requires extensive experience in cryptography, key management, and enterprise data governance, with a focus on

Qualifications

• 13+ years of experience in data security, security architecture, cloud security, information protection, cryptography, or related tech disciplines with at least 8 years hands-on cybersecurity experience preferred.
• Experience designing and implementing enterprise-scale data protection and security architectures in complex global environments.
• Deep expertise in data classification, data protection, encryption, tokenization, masking, privacy controls, data governance, and secure data lifecycle management.
• Strong understanding of cloud data platforms and services across AWS, Azure, and Google Cloud Platform.
• Experience securing enterprise data lakes, data warehouses, analytics environments, and large-scale data ecosystems.
• Deep expertise in cryptographic key management systems, hardware security modules, enterprise PKI, secrets management platforms, and encryption lifecycle management.
• Experience conducting architecture reviews, threat modeling, risk assessments, and security design evaluations for data-centric platforms and services.
• Familiarity with privacy regulations, data residency requirements, and security frameworks applicable to highly regulated environments.
• Professional certifications such as CISSP, CCSP, CDPSE, CIPP, SABSA, TOGAF, AWS Security Specialty, Azure Security Engineer, or equivalent certifications are highly desirable.
• Experience within financial services or other highly regulated industries is preferred.

Responsibilities

• Design and maintain enterprise data security architectures, standards, and reference patterns across cloud, SaaS, on-premises, analytics, and hybrid environments.
• Define security requirements and architecture controls for data classification, encryption, tokenization, masking, privacy, retention, secure data sharing, and cryptographic key management.
• Conduct security architecture reviews for data lakes, data warehouses, analytics platforms, cloud data services, enterprise applications, and large-scale data ecosystems.
• Partner with engineering, cloud, infrastructure, and cybersecurity teams to embed security controls into enterprise data platforms and services.
• Define cryptographic architecture requirements including key management systems (KMS), hardware security modules (HSMs), secrets management platforms, certificate lifecycle management, and encryption standards.
• Assess data security risks and develop mitigation strategies aligned with enterprise security policies and regulatory requirements.
• Provide subject matter expertise on data protection technologies, encryption, key management, cryptographic controls, secure data architectures, and enterprise data governance.
• Evaluate emerging data security technologies, threats, and industry trends to support future-state architecture strategies.

Skills

Data security architectures

Cloud security

Risk assessment

Threat modeling

Encryption and key management

Regulatory compliance

Cross-functional collaboration

Tools

KMS

HSMs

Secrets management

Certificate lifecycle management

Encryption standards

Job description

State Street is seeking a Senior Data Security Architect to design, review, and govern data security architectures across cloud, on-premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, infrastructure, and cybersecurity teams to embed protections throughout the data lifecycle and ensure compliance with regulatory requirements.

This role requires extensive experience in cryptography, key management, and enterprise data governance, with a focus on