Enterprise Integration Security Architect

State Street • Princeton, NJ

9d • $120,000 - $202,500 • Hybrid

About The Position

State Street is seeking an Enterprise Integration Security Architect within its Security Architecture organization. The role designs and governs security architectures for enterprise integrations, APIs, messaging platforms, event-driven architectures, managed file transfer services, and third-party connectivity. The architect partners with application development, cloud engineering, infrastructure, data, and cybersecurity teams to establish secure, resilient, and scalable integration patterns across the enterprise.

The position helps protect the firm's applications, data, cloud platforms, and technology services by embedding integration security controls into enterprise technology solutions. It supports risk reduction while enabling business innovation and digital transformation, including across APIs, cloud services, third-party platforms, and event-driven architectures.

This is a hybrid position under State Street’s hybrid work model, with standard business hours and flexibility to support global stakeholders across multiple time zones. Limited travel may be required based on business needs. The stated annual salary range is $120,000–$202,500 for the primary location; the applicable range may differ for other locations.

Requirements

• At least 14 years of experience in security architecture, application security, integration architecture, middleware technologies, or related technology disciplines, with at least 8 years of hands-on cybersecurity experience preferred.
• Demonstrated experience designing and securing enterprise integration platforms, APIs, messaging environments, and cloud-native services.
• Deep expertise in API security, OAuth, OpenID Connect, SAML, JWT, mTLS, PKI, secrets management, and machine identity security.
• Experience with enterprise messaging and integration technologies such as IBM MQ, Kafka, Solace, Event Hubs, RabbitMQ, MuleSoft, Apigee, Kong, Azure Integration Services, or equivalent platforms.
• Strong understanding of cloud-native architectures, microservices, containers, Kubernetes, serverless technologies, and modern application architectures.
• Experience conducting security architecture reviews, threat modeling, and risk assessments for integration and data exchange solutions.
• Knowledge of Zero Trust principles, data protection requirements, encryption technologies, and secure communication architectures.
• Ability to work effectively with application, cloud, infrastructure, engineering, and cybersecurity teams in a global environment.
• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• Deep expertise in API security, application integration, messaging security, and service-to-service communications.
• Strong understanding of modern integration architectures, including APIs, microservices, event-driven architectures, cloud integrations, and SaaS connectivity.
• Experience with authentication and authorization frameworks, including OAuth 2.0, OpenID Connect, SAML, JWT, mTLS, and machine-to-machine authentication.
• Strong analytical, problem-solving, and risk assessment skills, with the ability to develop practical, scalable security solutions.
• Strong communication and stakeholder management skills, with the ability to collaborate across architecture, engineering, cloud, and business teams.

Nice To Haves

• Professional certifications such as CISSP, CCSP, GIAC, TOGAF, SABSA, AWS Security Specialty, Azure Security Engineer, or equivalent certifications.
• Experience within financial services or other highly regulated industries.

Responsibilities

• Design and maintain security architectures, standards, and reference patterns for APIs, messaging platforms, event streaming services, file transfers, and third-party integrations.
• Conduct security architecture reviews for enterprise integration solutions across cloud, SaaS, hybrid, and on-premises environments.
• Define security requirements for API gateways, service-to-service communications, machine identities, partner connectivity, and integration platforms.
• Provide subject matter expertise on authentication, authorization, encryption, tokenization, secrets management, and secure integration design patterns.
• Partner with engineering and architecture teams to embed security controls into enterprise integration platforms and services.
• Assess integration security risks and recommend mitigation strategies aligned with enterprise security standards and regulatory requirements.
• Evaluate emerging integration technologies and industry trends to support future-state architecture and secure technology adoption.
• Support enterprise API programs, cloud transformation initiatives, and third-party connectivity solutions.

Benefits

• Retirement savings plan (401K) with company match.
• Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages.
• Paid time off, including vacation, sick leave, short-term disability, and leave for family care responsibilities.
• Access to the Employee Assistance Program.
• Incentive compensation, including eligibility for annual performance-based awards, subject to stated exclusions and applicable sales incentive plans.
• Eligibility for certain tax-advantaged savings plans.
• Inclusive development opportunities.
• Flexible work-life support.
• Paid volunteer days.
• Employee networks.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior