Senior Data Security Architect (Hybrid)

State Street; Devon (PA); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K match and comprehensive benefits

Hybrid work model

Paid time off & disability coverage

Job summary

State Street is seeking a Senior Data Security Architect to design, review, and govern data security architectures across cloud, on‑premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, infrastructure, cybersecurity, and business teams to ensure data protection is embedded throughout the data lifecycle and aligned with regulatory requirements.

You will lead architecture reviews, define cryptographic standards, assess risks, and guide the

Qualifications

• Deep expertise in data security architectures and enterprise information security principles.

Responsibilities

• Design and maintain enterprise data security architectures across cloud, on‑premises, and hybrid environments.
• Define security requirements and controls for data classification, encryption, tokenization, masking, and privacy.
• Conduct architecture reviews for data lakes, warehouses, and analytics platforms.
• Partner with engineering, cloud, infrastructure, and cybersecurity teams to embed security controls.
• Define cryptographic architecture requirements including KMS, HSMs, and secrets management.
• Assess data security risks and develop mitigation aligned with policies and regulations.
• Provide SME on data protection technologies and enterprise data governance.
• Evaluate emerging data security technologies and trends to support future-state architecture strategies.

Skills

Data security architecture

Cloud security

Threat modeling

Risk assessment

Security governance

cryptography & key management

Tools

KMS

HSMs

PKI

Job description

State Street is seeking a Senior Data Security Architect to design, review, and govern data security architectures across cloud, on‑premises, SaaS, analytics, and hybrid environments. You will partner with data engineering, cloud, infrastructure, cybersecurity, and business teams to ensure data protection is embedded throughout the data lifecycle and aligned with regulatory requirements.

You will lead architecture reviews, define cryptographic standards, assess risks, and guide the