State Street

State Street

Head of Workforce Authentication Services, MD

Boston, Massachusetts, USA

Sponsorship not specified$170k-$283kDetected 1 day ago
Platform EngineeringLeadership

About the role

  • This role consolidates capabilities currently distributed across two towers into a single, accountable engineering and operations leadership role.
  • If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
  • For a full overview, visit https://hrportal.ehr.com/statestreet/Home.

Responsibilities

  • Develop and execute a single, unified Workforce Authentication strategy that consolidates all authentication services into one engineering and operations function with one accountable leader.
  • Partner with the Heads of CIAM, Privileged & Infrastructure Access, IGA, and IAM Oversight to ensure a coherent, end-to-end IAM operating model.
  • Drive vendor and product assessments and lead comparative POCs aligned to State Street use cases.
  • Own the Authentication compliance with IAM Standard (Account Authentication, Password Parameters, MFA, Federation/SSO, Session Management) and ensure alignment to NIST SP 800-53, NIST SP 800-63B, DORA, BAIT, UK PRA SS1/21, MAS TRM, HKMA SPM and APRA CPS 234.
  • Support assurance compliance with the Second Line of Defence (Technology Risk Management), Third Line (Corporate Audit) and External Auditors (E&Y) - including evidence ownership, RCSA control mapping, and finding remediation.
  • Provide a support and data for compliance management across the workforce authentication environment: control design, control testing readiness, KRI/KPI reporting to the IAM Governance Council, Cybersecurity Risk Committee (CRC) and Technology Risk Committee (TRC).
  • Own end-to-end remediation of all audit, regulatory and penetration-test findings affecting workforce authentication.
  • Own the operational interface for Authentication Services with key partners including End User Computing, Platform Engineering, Production Management, Network and the regional IT heads.
  • Lead a globally distributed team across; evolve the operating model in line with the IAM portfolio management framework.
  • Drive talent strategy, succession, and a culture of engineering excellence, multi-disciplinary delivery and accountable ownership.

Requirements

  • Bachelors Degree in Cyber Security or related technical discipline

Nice to have

  • Define the multi-year target architecture for authentication aligned to State Street's Technology and Security strategies
  • Serve as the engineering owner of the Workforce Passwordless program, accountable for delivery against EC-committed milestones and the financial plan.
  • Lead the technical design and rollout of supporting technologies required to enable transition to passwordless authentication.
  • Accountable for the availability, performance and resilience of Tier-0 authentication services including DR posture, recovery testing, capacity management, and major-incident command for authentication outages.
  • evolve the operating model in line with the IAM portfolio management framework.
  • 15+ years in technology / engineering / security roles, with at least 8 years leading large-scale authentication engineering and operations functions ideally in a regulated financial services environment.
  • Deep, hands-on technical depth across Active Directory, Microsoft Entra ID, Kerberos, LDAP, SAML, OIDC, FIDO2/WebAuthn, MFA, and federation platforms.
  • Experience operating Tier-0 critical services with strict availability, DR and resilience SLAs.

Compensation

  • $170,000 - $282,500 Annual

Benefits

  • Education & Preferred Qualifications
  • State Street's comprehensive benefits program, which includes:

Company info

  • Who we are looking for
  • Global Cybersecurity (GCS) protects State Street and its clients from the impact of cyber-attacks against systems by understanding the risks these attacks present and mitigating them through a robust, continuously evolving cybersecurity program and control environment.
  • Reporting to the Head of Identity & Access Management, the Head of Workforce Authentication Services, MD will lead the strategic direction, engineering, operations and compliance posture of all workforce authentication platforms at State Street.
  • Why this role is important to us
  • The successful candidate will also serve as the engineering leader for the Workforce Passwordless program, owning the end-to-end technical execution and the elimination of password-dependent authentication protocols across the enterprise.
  • What you will be responsible for
  • Scope of Platforms and Services
  • The role owns engineering, operations, resilience and compliance for the workforce authentication platform stack, including but not limited to:

Visa & Work Authorization

  • gin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military a
Apply directly at State Street →Create a free account for alerts like thisView State Street immigration profile

This listing is sourced directly from State Street's careers page and normalized into a canonical job model.