This role pays less than
65%
of similar roles. Most pay
$150,300–$217,500
— the shaded band above.
At the midpoint, this role pays about
$161k
versus about
$184k
for comparable roles.
Based on 240 similar postings.
Employer
About State Street
State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody
State Street currently has
186 open roles
on FindRole.
Listed pay typically runs
$120,000–$202,500
across 182 roles with salary data.
The Enterprise Integration Security Architect joins the Security Architecture organization to design and govern security architectures for enterprise integrations, including APIs, messaging platforms, event-driven architectures, managed file transfer services, and third-party connectivity solutions. This role involves creating security standards, conducting architecture reviews across cloud and on-premises environments, and defining requirements for API gateways, machine identities, and service-to-service communications. The architect will provide expertise in authentication, authorization, encryption, tokenization, and secrets management while collaborating with engineering and infrastructure teams to mitigate risks. Key technologies include OAuth 2.0, OpenID Connect, SAML, JWT, mTLS, PKI, Kafka, Solace, MuleSoft, Apigee, Kong, and Azure Integration Services. The role addresses the challenge of securing complex data exchanges and integration platforms within highly regulated environments while enabling digital transformation through secure, scalable, and resilient architectural patterns.
Design and maintain security architectures, standards, and reference patterns for APIs, messaging platforms, and file transfers.
Conduct security architecture reviews for integration solutions across cloud, SaaS, hybrid, and on-premises environments.
Define security requirements for API gateways, service-to-service communications, machine identities, and partner connectivity.
Provide subject matter expertise on authentication, authorization, encryption, tokenization, and secrets management.
Embed security controls into enterprise integration platforms in partnership with engineering and architecture teams.
Assess integration security risks and recommend mitigation strategies aligned with corporate standards and regulations.
Evaluate emerging technologies and industry trends to support future-state architecture and secure technology adoption.
What we're looking for
Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
14 years or more of experience in security architecture, application security, integration architecture, middleware technologies, or related disciplines.
At least 8 years of hands-on cybersecurity experience is preferred.
Expertise in API security, authentication/authorization frameworks (OAuth 2.0, OpenID Connect, SAML, JWT, mTLS), and secrets management.
Experience with enterprise messaging and integration platforms such as IBM MQ, Kafka, Solace, MuleSoft, Apigee, or Azure Integration Services.
Proficiency in cloud-native architectures, microservices, containers, Kubernetes, and serverless technologies.
Experience conducting security architecture reviews, threat modeling, and risk assessments for integration and data exchange solutions.
Professional certifications such as CISSP, CCSP, GIAC, TOGAF, SABSA, or relevant cloud security certifications are highly desirable.