Senior Enterprise Integration Security Architect

State Street

Clifton (NJ)

Hybrid

USD 121,500 - 202,500

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

State Street is seeking an Enterprise Integration Security Architect to design and govern security architectures for enterprise integrations, APIs, and messaging platforms across cloud and on‑premises environments.

You will partner with engineering, cloud, infrastructure, data, and cybersecurity teams to ensure secure, resilient integration patterns, perform security architecture reviews, and drive threat modeling and zero‑trust principles in a highly regulated financial services setting.

Qualifications

Degree in Computer Science, Cybersecurity, Information Technology, Engineering.
14+ years in security/integration architecture with at least 8 years hands-on cybersecurity experience.
Experience designing enterprise integration platforms, APIs, messaging environments, and cloud‑native services.
Deep expertise in API security, OAuth, OpenID Connect, SAML, JWT, mTLS, PKI, and secrets management.
Experience with enterprise messaging and integration technologies such as IBM MQ, Kafka, Solace, Event Hubs, RabbitMQ, MuleSoft, Apigee, Kong, Azure Integration Services, or equivalent platforms.
Strong understanding of cloud‑native architectures, microservices, containers, Kubernetes, serverless technologies, and modern application architectures.
Experience conducting security architecture reviews, threat modeling, and risk assessments for integration and data exchange solutions.
Knowledge of Zero Trust principles, data protection requirements, encryption technologies, and secure communication architectures.
Professional certifications such as CISSP, CCSP, GIAC, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, or equivalent certifications are highly desirable.
Experience within financial services or other highly regulated industries is preferred.

Responsibilities

Design and maintain security architectures for APIs, messaging platforms, event streaming services, file transfers, and third‑party integrations.
Conduct security architecture reviews for enterprise integration solutions across cloud, SaaS, hybrid, and on‑premises environments.
Define security requirements for API gateways, service‑to‑service communications, machine identities, partner connectivity, and integration platforms.
Provide subject matter expertise on authentication, authorization, encryption, tokenization, secrets management, and secure integration design patterns.
Partner with engineering and architecture teams to embed security controls into enterprise integration platforms and services.
Assess integration security risks and recommend mitigation strategies aligned with enterprise security standards and regulatory requirements.
Evaluate emerging integration technologies and industry trends to support future‑state architecture and secure technology adoption.