This role pays less than
72%
of similar roles. Most pay
$160,477–$220,022
— the shaded band above.
At the midpoint, this role pays about
$161k
versus about
$190k
for comparable roles.
Based on 240 similar postings.
Employer
About State Street
State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody
State Street currently has
299 open roles
on FindRole.
Listed pay typically runs
$120,000–$202,500
across 211 roles with salary data.
As an Enterprise Identity & Access Management Architect within the Security Architecture organization, you will define and drive the enterprise IAM strategy, architecture, standards, and roadmap across hybrid cloud, SaaS, and on-premises environments. You will lead the design and governance of identity services including Identity Governance, Privileged Access Management, Authentication, Authorization, Federation, and Directory Services. Your daily work involves developing secure architecture patterns for workforce, customer, third-party, and machine identities while embedding controls into enterprise platforms. You will utilize technologies such as Microsoft Entra ID, SailPoint, Saviynt, CyberArk, Okta, Ping Identity, and ForgeRock to implement Zero Trust principles and multi-factor authentication. This role addresses the critical challenge of protecting enterprise identities and privileged access within a highly regulated industry to ensure operational resilience and secure business growth through robust identity governance.
Define and maintain the enterprise IAM strategy, architecture, standards, and roadmap.
Design and govern identity services including IGA, PAM, authentication, authorization, federation, and directory services.
Develop secure identity architecture patterns for workforce, customer, third-party, and machine identities.
Embed identity controls into enterprise platforms in collaboration with engineering, cloud, and cybersecurity teams.
Drive the adoption of Zero Trust principles, strong authentication, and least privilege practices.
Provide architectural oversight and governance for strategic identity initiatives across hybrid cloud and on-premises environments.
What we're looking for
Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.
10+ years of experience in cybersecurity, security architecture, Identity & Access Management, or related technology disciplines.
Experience designing and implementing enterprise-scale IAM solutions across cloud, SaaS, and on-premises environments.
Deep understanding of IGA, PAM, SSO, MFA, and federated identity technologies.
Experience with leading IAM platforms including Microsoft Entra ID, SailPoint, Saviynt, CyberArk, Okta, Ping Identity, ForgeRock, or equivalent technologies.
Professional certifications such as CISSP, CCSP, TOGAF, SABSA, SailPoint, CyberArk, or equivalent security and IAM certifications (preferred).
Experience operating within highly regulated industries, preferably financial services.
IAM
IGA
SSO
Okta
Microsoft Entra ID
PingIdentity
CyberArk
SAML
OIDC
OAuth
RBAC
ABAC
PAM
Microsoft Identity Manager
Directory Services
Federated Identity Management
Information Security
Identity Access Management
Zero Trust Architecture
Active Directory
Microsoft Entra
Okta
Ping
CyberArk
AWS
Microsoft Azure
Google Cloud Platform
ServiceNow
PKI
ADFS
DNS
TCP/IP
NIST Frameworks
IAM
IGA
SailPoint
Okta
Microsoft Entra ID
PingIdentity
CyberArk
Microsoft Identity Manager
SAML
OIDC
OAuth
RBAC
ABAC
PAM
Directory Services
Federated Identity Management
Information Security
Security+
CISSP
CISM