Prepin
Log in
State Street

engineering opportunity

Cloud Platform Engineer - AuthN/Z

The Cloud Identity Engineer will design, implement, and monitor automated solutions for Customer Identity and Access Management (CIAM) at scale. They will also evolve identity lifecycle management processes and fine-tune advanced security features like Conditional Access Policies.

Burlington, Massachusetts, United StatesonsiteFULL_TIME

Posted

About the role

What will you do at State Street?

Who we are

looking for

State Street Alpha is seeking a highly motivated Security Engineer to join our Cloud Platform Engineering team. In this role, you’ll help to design and implement solutions for Customer Identity and Access Management (CIAM) in the cloud. The candidate will be responsible for defining and automating processes to optimize access management using the Customer Identity Platform and related technologies.

Why this role is important to us

The team you will be joining is a part of Charles River Development (or CRD), that became a part of State Street in 2018. CRD helps create enterprise investment management software solutions for large institutions in the areas of institutional investment, wealth management and hedge funds. Together we have created first open front-to-back platform - State Street Alpha, that was launched in 2019.

Join us if delivering next generation infrastructure, using emerging technologies sounds like a challenge you are up for.

What you will be responsible for

As a Cloud Identity Engineer, you will:

Develop, implement, and monitor automated solutions for managing CIAM at scale for the workforce, customers, and partners

Evolve identity lifecycle management processes for humans and automation accounts

Evaluate and implement new technologies to improve the strength of authentication

Test and operationalize new features that become available on existing platforms

Proactively identify opportunities and gaps around technologies and processes

Fine-tune advanced security features such as Conditional Access Policies and Customer Authentication Extensions

Assist external auditors with questions related to CIAM

Manage third party vendor engagements such as auditors and penetration testers

Participate in projects to enhance Cloud Security beyond the domain of CIAM

What we value

Strong process development and automation skills using Python and/or PowerShell

Practical knowledge needed to author modular and maintainable scripts and utilities

Customer identity and access management experience in a regulated SaaS environment

Practical understanding of core identity technologies (AD, Entra ID, Privileged Access Management) and their associated governance, lifecycle management, automation and delivery

Ability to lead and work well with multiple priorities, and effectively handle concurrent demands to prioritize responsibilities

Ability to formulate clear strategy, present and gain support

Ability to effectively integrate, contribute and overlap with other functions including cloud/enterprise architecture, compliance, risk, engineering, developers

Ability to formulate objectives with clear business value and demonstrate progress along the way

Ability to communicate complex and innovative concepts with proven experience driving decision making across different stakeholder groups

Ability to be self-directed and to proactively anticipate problems and seek opportunities

A champion for continuous improvement

Experience with infrastructure systems, security assessments, and security processes is a bonus.

Education & Preferred Qualifications

5 to 10 Years Related work experience in roles of increasing responsibility/influence governing and managing enterprise cloud and/or infrastructure technologies

Bachelor’s degree in Computer Science, Information Systems, or related field

Salary Range:

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Job Application Disclosure:

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Which skills does this role require?

Cloud platform engineeringIdentity and access managementCIAMPythonPowershellAutomationActive directoryEntra IDPrivileged access managementSaaSSecurity assessmentsInfrastructure systemsConditional access policiesLifecycle managementCloud securityCloud Platform EngineeringIdentity Lifecycle ManagementActive DirectoryPrivileged Access ManagementConditional Access PoliciesCloud SecuritySecurity AssessmentsState Street AlphaCharles River DevelopmentGovernanceAuthenticationAuthorizationEnterprise Software

Make your next move

Build a shortlist and prepare

Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.

Review the responsibilities and requirements before adding an opening to your shortlist.

Role information can change. Confirm current details on the original application page.

Product

AI Candidate AgentCompaniesBrowse JobsDeep ProfileSkill AssessmentOpportunity Matching
Prepin.ai

© 2026 Prepin | All rights reserved.