Who we are looking for 

State Street Alpha is seeking a highly motivated Security Engineer to join our Cloud Platform Engineering team. In this role, you’ll help to design and implement solutions for Customer Identity and Access Management (CIAM) in the cloud. The candidate will be responsible for defining and automating processes to optimize access management using the Customer Identity Platform and related technologies. 

Why this role is important to us 

The team you will be joining is a part of Charles River Development (or CRD), that became a part of State Street in 2018. CRD helps create enterprise investment management software solutions for large institutions in the areas of institutional investment, wealth management and hedge funds. Together we have created first open front-to-back platform - State Street Alpha, that was launched in 2019.  

Join us if delivering next generation infrastructure, using emerging technologies sounds like a challenge you are up for.  

What you will be responsible for 

As a Cloud Identity Engineer, you will: 

• Develop, implement, and monitor automated solutions for managing CIAM at scale for the workforce, customers, and partners 

• Evolve identity lifecycle management processes for humans and automation accounts 

• Evaluate and implement new technologies to improve the strength of authentication 

• Test and operationalize new features that become available on existing platforms 

• Proactively identify opportunities and gaps around technologies and processes 

• Fine-tune advanced security features such as Conditional Access Policies and Customer Authentication Extensions 

• Assist external auditors with questions related to CIAM 

• Manage third party vendor engagements such as auditors and penetration testers 

• Participate in projects to enhance Cloud Security beyond the domain of CIAM 

What we value  

• Strong process development and automation skills using Python and/or PowerShell 

• Practical knowledge needed to author modular and maintainable scripts and utilities 

• Customer identity and access management experience in a regulated SaaS environment 

• Practical understanding of core identity technologies (AD, Entra ID, Privileged Access Management) and their associated governance, lifecycle management, automation and delivery 

• Ability to lead and work well with multiple priorities, and effectively handle concurrent demands to prioritize responsibilities 

• Ability to formulate clear strategy, present and gain support 

• Ability to effectively integrate, contribute and overlap with other functions including cloud/enterprise architecture, compliance, risk, engineering, developers 

• Ability to formulate objectives with clear business value and demonstrate progress along the way 

• Ability to communicate complex and innovative concepts with proven experience driving decision making across different stakeholder groups 

• Ability to be self-directed and to proactively anticipate problems and seek opportunities 

• A champion for continuous improvement 

• Experience with infrastructure systems, security assessments, and security processes is a bonus. 

Education & Preferred Qualifications 

• 5 to 10 Years Related work experience in roles of increasing responsibility/influence governing and managing enterprise cloud and/or infrastructure technologies 

• Bachelor’s degree in Computer Science, Information Systems, or related field