Remote Architect

Who we are looking for The Advanced Defensive Architect is a member of a small team tasked with securing the firm’s most critical network environments and applications. The Architect is responsible for designing, implementing, and monitoring the control posture for the critical environments and applications, producing reference models, segments, solutions architecture, and advising teams as they build systems to ensure they are protected and aligned to required reports.

What you will be responsible for Executing the vision, strategy, and mission of the Advanced Defensive Architecture organization.

Reducing security risks by integrating controls aligned with State Street’s goals and objectives into security architecture.

Determining baseline system security requirements aligned to the criticality of the network environments and applications.

Developing cybersecurity designs for systems and networks with multiple security levels and processing multiple data classification levels.

Supporting the Managing Director to understand, manage, and reduce information security risks on behalf of executive leadership.

Integrating cybersecurity requirements into comprehensive designs, policies, and plans for systems and networks.

Defining acquisition life‑cycle cybersecurity architecture requirements and security engineering requirements.

Determining if systems and architecture are consistent with cybersecurity architecture guidelines.

Performing security reviews of the firm’s most critical network environments and applications.

Identifying gaps in security architecture of the firm’s most critical network environments and applications.

Developing a prioritized cybersecurity risk management plan for the firm’s most critical network environments and applications.

Determining and documenting the impact of new systems, software, and integrations on the system’s cybersecurity posture.

Creating system security architecture documentation, plans, and projects.

Identifying metrics and using them to determine cybersecurity design and architecture effectiveness.

What we value 5years or more experience in Security Architecture, with at least 1year in artificial intelligence and automation.

Extensive experience performing security architecture analysis.

Extensive experience evaluating system designs for cyber risk and compliance with control frameworks and principles.

Proven ability to work remotely, travel when needed, and operate across multiple geographic time zones.

Extensive experience designing network architecture aligned to security principles and control frameworks.

Experience with on‑premises, colocation centers, and cloud environments.

Experience with app migrations from on‑premises data centers to cloud platforms.

Experience leveraging Cloud Security Posture Management (CSPM) and visibility tools.

Experience with payment systems or classified network architecture.

Experience implementing network segmentation.

This knowledge will help you succeed in this role Knowledge of cyber security threat actors, their tactics, techniques, procedures, tradecraft, and noteworthy attacks.

Knowledge of computer network protocols.

Knowledge of risk management processes.

Knowledge of software engineering principles and practices.

Knowledge of enterprise information technology (IT) architecture principles, practices, and reference models.

Knowledge of hardware and software reverse engineering tools and techniques.

Knowledge of secure software development, deployment, and maintenance.

Education Bachelor’s Degree in computer science, cybersecurity, information technology, software engineering, information systems, or computer engineering.

Security Architecture Certification (e.g., SABSA, ISSAP, Microsoft Cybersecurity Architect Expert, AWS Security Specialty).

Preferred qualifications Master’s Degree in computer science, cybersecurity, information technology, software engineering, information systems, or computer engineering.

Experience working with information security teams such as fusion centers, security operations centers, vulnerability assessment, threat management, incident management, cyber “hunt,” and big data analysis.

Ability to develop and operate within a set financial budget.

Desired Outcomes Design highly secure network segments and applications and guide and advise others to uplift the security of existing critical systems.

Benefits Retirement savings plan (401K) with company match.

Insurance coverage including basic life, medical, dental, vision, long‑term disability, and other optional additional coverages.

Paid‑time off: vacation, sick leave, short‑term disability, and family care responsibilities.

Employee Assistance Program.

Incentive compensation including eligibility for annual performance‑based awards (excluding certain sales roles subject to sales incentive plans).

Eligibility for certain tax‑advantaged savings plans.

Equal Opportunity Employer As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Job Application Disclosure It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.