Identity and Access Management Engineer

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Clifton, NJPrinceton, NJ
Salary
$125,000–$226,250 / yr
Employment
Full-time
Posted
41 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $185k
This role $176k
$113k most similar roles pay here $238k

This role pays less than 55% of similar roles. Most pay $152,675–$216,725 — the shaded band above. At the midpoint, this role pays about $176k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 299 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 211 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Identity and Access Management Engineer

The Identity and Access Management Engineer joins the cyber Identity and Access Management team to design security solutions for scale and build zero trust building blocks to enhance end-to-end layered security maturity. This role involves developing long-term security strategies, defining user cases for private, public, and hybrid cloud environments, and leading the transition toward an adaptive identity framework. The engineer will oversee multiple key initiatives, manage change imperatives, and collaborate with cross-functional teams to ensure standardized security non-functional requirements. Key technical competencies include PKI infrastructure, security protocols, HSM, Secret Vault, MFA, and privileged access management. Additionally, the role requires expertise in Active Directory, AAD, IDP, SSO, RBAC, ABAC workflows, and privacy governance. The position addresses complex security needs by building resilient cyber services architecture and monitoring infrastructure to support evolving business operations.

What you'll do

  • Design security solutions for scale and build zero trust building blocks to enhance layered security maturity.
  • Develop long-term security strategies and define IAM requirements for private, public, and hybrid cloud environments.
  • Lead the transition toward a scalable IAM architecture and an adaptive identity framework.
  • Evaluate technology products and services that align with the roadmap and evolving business demands.
  • Oversee the implementation of multiple key initiatives while managing change management imperatives and resources.
  • Develop plans for standardized security non-functional requirements and validation processes across functional areas.
  • Manage governance processes to ensure coordination of IAM initiatives across cross-functional teams.

What we're looking for

  • Bachelor's degree in a technical field is required.
  • Experience designing and implementing large-scale change initiatives.
  • Expertise in PKI infrastructure, security protocols, HSM, and Secret Vault (preferred).
  • Knowledge of MFA and Privileged Access Management (preferred).
  • Proficiency with Active Directory, AAD, IDP, and SSO access controls (preferred).
  • Experience with RBAC, ABAC workflows, Privacy, and Governance (preferred).
  • Ability to design for DR resilience challenges (preferred).
  • Strong communication, analytical, and collaborative skills are required.

More like this

Similar roles

Identity and Access Management Engineer

Booz Allen Hamilton

Honolulu, HI 65 days ago
IAM Active Directory LDAP PingIdentity SailPoint Saviynt One Identity Microsoft Identity Manager PKI PIV Splunk ELK Stack IGA PAM Zero Trust Single Sign-On SIEM

Identity and Access Management Privileged Access Management Engineer

Pacific Life

Newport Beach, CA +1 4 days ago $137,610–$168,190
Privileged Access Management (PAM) Identity and Access Management (IAM) CyberArk Delinea Netwrix Active Directory Entra ID Azure Windows Linux Multi-Factor Authentication Zero Trust API Agile ISO NIST
5+ yrs exp Hybrid

Enterprise Identity & Access Management Architect

State Street

Quincy, MA +3 85 days ago $120,000–$202,500
Identity & Access Management (IAM) Privileged Access Management (PAM) Zero Trust Single Sign-On (SSO) Multi-Factor Authentication (MFA) Federated Identity Microsoft Entra ID SailPoint Saviynt CyberArk Okta Ping Identity ForgeRock SaaS Security Architecture
10+ yrs exp Hybrid

ICAM Engineer

Booz Allen Hamilton

Colorado Springs, CO +2 78 days ago $86,800–$198,000
IAM Active Directory LDAP MFA Privileged Access Management CyberArk Delinea Azure AWS PKI PIV EntraID Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack IGA

ICAM Engineer

Booz Allen Hamilton

San Diego, CA 59 days ago $86,900–$198,000
IAM Active Directory LDAP MFA Okta Duo Privileged Access Management CyberArk Delinea Azure AWS PKI PIV Microsoft Identity Manager SailPoint Saviynt One Identity Splunk ELK Stack