Cyber Cloud Development and Support Engineer, AVP

State Street•Quincy, MA

1d•$90,000 - $157,500

About The Position

Global Cybersecurity (GCS) protects State Street and its clients from the impact of cyber-attacks by identifying risks and implementing a robust, continuously evolving cybersecurity program and control framework. Cyber Architecture & Engineering (Cyber A&E) is responsible for designing, engineering, deploying, and enhancing cybersecurity capabilities that safeguard enterprise assets and client information. This Cyber Cloud Development and Support Engineer role sits within the Identity and Privileged Access Engineering function. The role focuses on architecting, developing, and supporting scalable IAM/PAM solutions, driving automation, and ensuring compliance with enterprise security standards. The individual will lead initiatives across cloud and on-prem ecosystems, leveraging modern data and orchestration technologies to enhance control effectiveness, operational efficiency, and audit readiness.

Requirements

Bachelor’s degree in computer science, Information Technology, or related technical discipline.
7+ years of experience in IAM/PAM development, engineering, or support roles.
Strong experience in automation, data engineering, and workflow orchestration.
Proven ability to design scalable and secure enterprise solutions.
Experience with Agile development methodologies and tools such as Jira and Confluence.
Strong analytical, problem-solving, and troubleshooting skills.
Excellent verbal and written communication skills.
Ability to work collaboratively with global teams across multiple time zones.
Self-driven, detail-oriented, and capable of managing multiple priorities in a fast-paced environment.

Nice To Haves

Strong expertise in Identity and Access Management (IAM) and Privileged Access Management (PAM) domains.
Hands-on experience with: IAM tools: SailPoint
PAM tools: CyberArk, HashiCorp Vault
Experience working with: Cloud platforms: AWS (preferred), Azure
Data platforms: Databricks, AWS Data Ecosystem (S3, RDS & SQL Warehouse)
Orchestration: Apache Airflow, AutoSys
Programming/Scripting: Python, Java, SQL, Shell & Perl scripting
Knowledge of IAM data models, entitlement structures, and access governance frameworks.
Experience with API integrations, microservices architecture, and REST-based services.
Understanding of SOX, audit, and compliance controls related to IAM/PAM.

Responsibilities

Lead development and support of IAM/PAM solutions across enterprise platforms, including user access provisioning, privileged access controls, and identity lifecycle management.
Hands-on experience in architecting and securing cloud environments, particularly on AWS, with a strong focus on implementation and operational excellence.
Design, build, and maintain automated workflows using technologies such as Python, Java, Databricks, Airflow, and AutoSys for identity data processing, access certifications, and compliance reporting.
Develop and manage IAM data pipelines on AWS and Databricks to support analytics, reporting, and audit requirements.
In-depth, practical knowledge of directory services (Active Directory, LDAP), IAM protocols (SAML, OAuth, OpenID), and cloud IAM platforms (Azure AD, AWS IAM).
Integrate IAM/PAM tools (e.g., SailPoint, CyberArk, HashiCorp) with enterprise applications and infrastructure systems.
Collaborate with application, infrastructure, and cloud teams to onboard systems into IAM/PAM frameworks and enforce access governance controls.
Implement automation for privileged account onboarding, access recertification, and activity monitoring.
Support and enhance batch job scheduling and orchestration using AutoSys and Airflow for IAM processes and data workflows.
Troubleshoot production issues, perform root cause analysis, and implement preventive solutions.
Develop APIs and integration components using Java/Python for seamless connectivity between IAM systems and enterprise applications.
Create and maintain technical documentation, SOPs, and operational runbooks.
Ensure IAM/PAM solutions align with security policies, standards, and regulatory requirements.
Drive continuous improvement initiatives by introducing automation, enhancing performance, and reducing manual processes.
Mentor junior team members and lead offshore/onshore development and support teams.

Benefits

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks