State Street—Cloud Platform Engineering - Azure Security, AVP

Job description

Description: Charles River Development is seeking an experienced Assistant Vice President (AVP), Cloud Platform Engineering to lead strategic cloud security, identity and governance initiatives across enterprise-scale Azure environments. This role combines deep technical leadership with people management responsibilities, driving cloud modernization, security transformation, governance automation, and platform engineering excellence. The AVP will be responsible for defining and executing cloud security and identity strategies, managing high-performing engineering teams, influencing enterprise architecture decisions, and partnering closely with senior technology and business leaders. The role requires strong expertise in Microsoft Entra ID, Azure Security, Azure Policy, Azure IAM, Azure AD B2C/External Identity, cloud governance, IAC, automation, and AI-enabled engineering solutions. This lead will oversee the full employee lifecycle, including hiring, onboarding, mentoring, performance management, career development, succession planning, and talent retention while ensuring delivery of secure, scalable, and compliant cloud platform services. Key Responsibilities: Azure Cloud Security - Define and execute enterprise identity and access management strategies leveraging Microsoft Entra ID - Lead design and implementation of Azure Identity Governance, Privileged Identity Management (PIM), Conditional Access, Identity Protection, Access Reviews, and Zero Trust security controls - Drive enterprise adoption of Azure IAM best practices, RBAC models, least-privilege access, federated identity solutions, and authentication services basis business decisions - Lead architecture and governance of Azure AD B2C / External Identity solutions for client-facing and partner-facing applications - Partner with security, risk, compliance, and audit teams to ensure adherence to regulatory and security requirements Azure Governance & Platform Engineering - Define enterprise cloud governance frameworks using Azure Policy, Management Groups, Landing Zones, and subscription governance models - Lead implementation of Policy-as-Code, Governance-as-Code, and Security-as-Code capabilities using modern engineering practices - Establish automated compliance validation, remediation, and continuous governance processes across Azure environments - Collaborate with architecture, security, application, and infrastructure teams to define cloud standards and guardrails - Drive platform engineering initiatives focused on self-service capabilities, standardization, scalability, and operational excellence Automation & AI Enablement - Champion automation-first engineering practices using Terraform, PowerShell, Python, GitHub Actions, Azure DevOps, and other cloud-native tooling - Identify and implement AI-driven solutions to improve engineering productivity, governance automation, operational efficiency, compliance monitoring, and developer experience - Lead adoption of intelligent operational workflows leveraging Generative AI, Copilot technologies, and engineering automation frameworks Stakeholder & Client Engagement - Collaborate with internal technology teams, enterprise architecture, cybersecurity, operations, product management, and executive leadership. - Partner with external clients, vendors, and strategic partners to understand requirements and deliver secure cloud solutions. - Influence and negotiate across multiple stakeholder groups to drive alignment on priorities, standards, and platform roadmaps. - Act as a trusted advisor to senior leaders on cloud strategy, identity modernization, security posture, and governance transformation. Leadership & People Management - Lead, mentor, and develop a team of cloud platform, security, and identity engineers. - Manage the end-to-end employee lifecycle including workforce planning, hiring, onboarding, performance management, compensation discussions, talent development, succession planning, promotions, and retention strategies. - Conduct year-end performance reviews, goal setting, career development planning, and ongoing performance coaching. - Foster a culture of accountability, collaboration, innovation, and continuous improvement. - Effectively manage employee relations, conflict resolution, difficult conversations, and stakeholder escalations. - Provide executive-level reporting and updates to senior technology leadership, engineering leadership, and business stakeholders. - Build and maintain a high-performing engineering organization aligned with business priorities and strategic objectives. Required Qualifications - Bachelor's degree in Computer Science, Engineering, Information Technology, or related discipline. - 15-20 years of extensive experience in cloud security, identity management - 5+ years of direct people management experience leading Cloud engineering teams - Demonstrated experience managing year-end reviews, performance management processes, career development, employee mentoring, and conflict resolution. - Deep expertise in Microsoft Entra ID, including: - Conditional Access - Identity Protection - Privileged Identity Management (PIM) - Access Reviews - Identity Governance - Federation and SSO - Strong experience with Azure IAM, RBAC, Privileged Access models, and Zero Trust architectures. - Extensive experience with Azure Security services including: - Microsoft Defender for Cloud - Microsoft Sentinel - Key Vault - Security Center - Azure Monitor - Security Governance Frameworks - Strong expertise implementing Azure Policy, Policy-as-Code, Governance-as-Code, and enterprise cloud controls. - Experience reporting platform health, risk, compliance, security, and delivery metrics to executive leadership. - Proven ability to manage complex stakeholder relationships across global organizations. - Strong communication, presentation, influencing, and leadership skills. Preferred Qualifications - Experience leading cloud transformation programs within large-scale financial services or regulated enterprise environments. - Strong understanding of Azure Landing Zones, enterprise networking, hybrid connectivity, and multi-cloud operating models. - Strong experience developing infrastructure automation using Terraform, Bicep, PowerShell, Python, and CI/CD platforms. - Hands-on expertise with Azure AD B2C / External Identities and customer identity management solutions. - Experience building platform engineering organizations and self-service cloud capabilities. - Exposure to AI-assisted engineering, Generative AI platforms, Microsoft Copilot, agentic AI frameworks, and automation-based operational models. - Knowledge of regulatory frameworks such as NIST, ISO 27001, CIS, SOC2, PCI-DSS, and financial industry compliance standards. Microsoft certifications such as: - - Azure Solutions Architect Expert - Azure Security Engineer Expert - Microsoft Cybersecurity Architect Expert - Azure Administrator Expert - Identity and Access Administrator Associate What We Value - Strong people-first leadership approach. - Strategic thinking combined with hands-on technical credibility. - Executive presence and ability to communicate effectively with senior leadership. - Passion for mentoring and developing engineering talent. - Strong conflict resolution and stakeholder management skills. - Automation-first and AI-first engineering mindset. - Ability to balance business priorities, risk management, security, and engineering velocity. About State Street Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement