Cyber Cloud Development and Support Engineer, AVP

Global Cybersecurity (GCS) protects State Street and its clients from the impact of cyber-attacks by identifying risks and implementing a robust, continuously evolving cybersecurity program and control framework.

Cyber Architecture & Engineering (Cyber A&E) is responsible for designing, engineering, deploying, and enhancing cybersecurity capabilities that safeguard enterprise assets and client information.

This Cyber Cloud Development and Support Engineer role sits within the Identity and Privileged Access Engineering function. The role focuses on architecting, developing, and supporting scalable IAM/PAM solutions, driving automation, and ensuring compliance with enterprise security standards. The individual will lead initiatives across cloud and on-prem ecosystems, leveraging modern data and orchestration technologies to enhance control effectiveness, operational efficiency, and audit readiness.

Skills & Responsibilities:

• Lead development and support of IAM/PAM solutions across enterprise platforms, including user access provisioning, privileged access controls, and identity lifecycle management.
• Hands-on experience in architecting and securing cloud environments, particularly on AWS, with a strong focus on implementation and operational excellence.
• Design, build, and maintain automated workflows using technologies such as Python, Java, Databricks, Airflow, and AutoSys for identity data processing, access certifications, and compliance reporting.
• Develop and manage IAM data pipelines on AWS and Databricks to support analytics, reporting, and audit requirements.
• In-depth, practical knowledge of directory services (Active Directory, LDAP), IAM protocols (SAML, OAuth, OpenID), and cloud IAM platforms (Azure AD, AWS IAM).
• Integrate IAM/PAM tools (e.g., SailPoint, CyberArk, HashiCorp) with enterprise applications and infrastructure systems.
• Collaborate with application, infrastructure, and cloud teams to onboard systems into IAM/PAM frameworks and enforce access governance controls.
• Implement automation for privileged account onboarding, access recertification, and activity monitoring.
• Support and enhance batch job scheduling and orchestration using AutoSys and Airflow for IAM processes and data workflows.
• Troubleshoot production issues, perform root cause analysis, and implement preventive solutions.
• Develop APIs and integration components using Java/Python for seamless connectivity between IAM systems and enterprise applications.
• Create and maintain technical documentation, SOPs, and operational runbooks.
• Ensure IAM/PAM solutions align with security policies, standards, and regulatory requirements.
• Drive continuous improvement initiatives by introducing automation, enhancing performance, and reducing manual processes.
• Mentor junior team members and lead offshore/onshore development and support teams.

• Strong expertise in Identity and Access Management (IAM) and Privileged Access Management (PAM) domains.
• Hands-on experience with:

• IAM tools: SailPoint IdentityIQ
• PAM tools: CyberArk, HashiCorp Vault

• Experience working with:

Cloud platforms: AWS (preferred), Azure + Data platforms: Databricks, AWS Data Ecosystem (S3, RDS & SQL Warehouse) + Orchestration: Apache Airflow, AutoSys

• Programming/Scripting:

• Python, Java, SQL, Shell & Perl scripting

• Knowledge of IAM data models, entitlement structures, and access governance frameworks.
• Experience with API integrations, microservices architecture, and REST-based services.
• Understanding of SOX, audit, and compliance controls related to IAM/PAM., * Bachelor's degree in computer science, Information Technology, or related technical discipline.
• 7+ years of experience in IAM/PAM development, engineering, or support roles.
• Strong experience in automation, data engineering, and workflow orchestration.
• Proven ability to design scalable and secure enterprise solutions.
• Experience with Agile development methodologies and tools such as Jira and Confluence.
• Strong analytical, problem-solving, and troubleshooting skills.
• Excellent verbal and written communication skills.
• Ability to work collaboratively with global teams across multiple time zones.
• Self-driven, detail-oriented, and capable of managing multiple priorities in a fast-paced environment.

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.