Who we are looking for:

• Strong understanding of how to implement concepts such as password less authentication, zero trust model, SASE, etc.
• Strong technical skills and experience in architecting and implementing at least one or more solutions such as SailPoint IIQ, SailPoint IdentityNow, One Identity, IBM IGI, Saviynt, ForgeRock, Okta, Microsoft Entra ID, Ping Identity, etc.
• Strong technical skills and experience in architecting and implementing at least one or more PAM solutions such as Beyond Trust PasswordSafe, Beyond Trust Privileged Remote Access, CyberArk, CyberArk Secrets Manager, Delinea, etc.

Hybrid: This role can be performed in a hybrid model, where you can balance work from home and office to match your needs and role requirements.

What you will be responsible for:

• 12+ Years of IT experience with minimum 6+ years’ experience with CA PAM Privileged Access Management (PAM) Architecture, Design and Server onboarding.
• Design and implement Privileged Access Management solutions, including privileged account management, session monitoring, and credential vaulting.
• Collaborate with cross-functional teams to ensure PAM controls align with business requirements and industry best practices.
• Develop and enforce policies and procedures for managing privileged accounts across the organization.
• Implement mechanisms for secure provisioning, deprovisioning, and rotation of privileged account credentials.
• Implement controls to enforce the principle of least privilege and minimize the risk of unauthorized access. Define and enforce access policies, roles, and permissions for privileged accounts to ensure appropriate access levels.
• Implement secure credential storage and management solutions to protect privileged account credentials. Ensure encryption, access controls, and auditing mechanisms are in place to safeguard stored credentials.
• Conduct periodic reviews and audits of privileged access rights and activities. Identify and remediate any access anomalies or policy violations within the PAM framework.
• Integrate PAM solutions with other security technologies and systems, such as identity and access management (IAM) platforms and security information and event management (SIEM) systems. Automate PAM processes and workflows to enhance efficiency and reduce manual errors.
• Participate in security incident response activities related to privileged access. Investigate security incidents involving privileged accounts, coordinate response efforts, and implement necessary remediation measures.
• Develop and maintain PAM policies, standards, and procedures. Stay up to date with evolving PAM technologies, industry trends, and regulatory requirements related to privileged access.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.

We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.

Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement