The State Street Cyber Architecture & Engineering team is looking for a System Security Engineer . The Security Architecture & Governance Engineering team delivers architectural solutions, platforms, pipelines, and security tooling to secure State Street’s digital footprint. We are looking for engineers who have experience with secure configuration management practices and system hardening standards. The candidate will also have experience with development in one or more scripting languages and have experience with systems integrity assurance. The ideal candidate will show eagerness to learn and grow in all aspects of technical solutioning and will design, implement, and support agile solutions and processes leveraged by a large number of applications and infrastructure platforms hosted in our environments.
As our technology estate continues to grow across cloud, on-premises, and hybrid environments, maintaining secure, consistent, and compliant system configurations is essential to protecting critical business services. Misconfigurations remain one of the leading causes of security incidents, making proactive configuration management and system hardening a foundational component of our cybersecurity strategy.
The Systems Security Engineer plays a critical role in establishing and enforcing secure configuration baselines across servers, operating systems, cloud workloads, and platform services. By leveraging infrastructure automation, scripting, and compliance-as-code tools such as InSpec, the engineer helps transform security requirements into scalable, repeatable, and measurable controls. This role partners closely with infrastructure, cloud, platform, and engineering teams to embed security into operational processes, reduce manual effort, improve audit readiness, and strengthen the organization's overall security posture.
What You Will Be Responsible For
- Lead the management and engineering of large-scale Windows and Linux server environments.
- Define and implement platform security standards, operational procedures, and lifecycle management strategies.
- Drive platform stability, resiliency, scalability, and operational excellence.
- Design and develop infrastructure automation solutions using:
- Python
- PowerShell
- Shell Scripting
- Infrastructure-as-Code (Terraform, Ansible, or equivalent) for Azure, AWS and Oracle Cloud
- Automate provisioning, configuration management, patching, compliance validation, and operational workflows.
- Build reusable automation frameworks to reduce manual effort and improve platform consistency.
- Develop and maintain enterprise CI/CD deployment pipelines.
- Enable automated infrastructure and application deployment workflows.
- Integrate security, testing, compliance, and validation gates into deployment pipelines.
- Drive continuous improvement of release and deployment processes.
- Implement and maintain enterprise security baselines and operating system hardening standards.
- Drive alignment with:
- CIS Benchmarks
- Security Configuration Standards
- Compliance and Regulatory Requirements
- Lead compliance automation and continuous posture validation initiatives.
- Support audit, risk, and governance activities related to infrastructure security.
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Discover more information on jobs at StateStreet.com/careers
Read our CEO Statement
