Akamai SME

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Key Responsibilities

1. Micro-Segmentation Policy Management

• Design, implement, and maintain micro-segmentation policies across data center, cloud, and hybrid workloads using Akamai Guardicore.
• Enforce identity-based access controls and application ring-fencing to contain lateral movement and minimize attack surfaces.
• Apply tiered segmentation (Web, App, DB) and nano-segmentation (port, protocol, process-level) to protect critical assets and sensitive data flows.
• Collaborate with application owners to define and validate least-privilege access policies that align with Zero Trust Architecture (ZTA).
• Continuously review segmentation rules to ensure minimal disruption to production workloads while maintaining strong security posture.

• Maintain Layer 4 and Layer 7 visibility into network and application traffic using Akamai dashboards, flow maps, and visual analytics.
• Monitor real-time communication patterns to detect anomalies, unauthorized connections, and segmentation policy violations.
• Support ransomware containment and quarantine strategies through real-time telemetry and automated isolation.
• Investigate segmentation breaches and unauthorized access attempts, correlating data with SIEM and EDR tools.
• Generate and present visibility maps for audit, compliance, and architecture governance reviews.

• Deploy, configure, and manage Akamai Guardicore agents across Windows, Linux, and virtualized workloads (VMware, Azure, AWS).
• Validate agent health, version compliance, and telemetry integrity across distributed environments.
• Integrate Akamai Guardicore with:
  
  
  • Native firewalls and security controls (Windows Firewall, Azure NSG, AWS Security Groups)
  • REST APIs and third-party orchestration tools
  • SIEM, SOAR, and EDR platforms for unified policy enforcement and response automation.
• Support SaaS and on-premises deployment models, including remote aggregation nodes for distributed sites or OT networks.
• Manage platform patching, upgrades, and license renewals in collaboration with Akamai support and OEM partners.

• Review and validate segmentation violations and unauthorized access events flagged by the platform or SOC.
• Perform incident triage and root cause analysis (RCA) in collaboration with L3 Akamai SMEs, SOC analysts, and incident response teams.
• Develop and document incident playbooks for rapid response, isolation, and policy remediation.
• Contribute to forensic investigations by providing detailed traffic insights, communication path mapping, and historical telemetry.
• Maintain an updated knowledge base of known segmentation exceptions, approved flows, and remediation steps.

• Participate in Cyber Defense Center (CDC) governance reviews, transition planning, and new environment onboarding.
• Support SLA and KPI reporting by generating metrics from Akamai dashboards-covering coverage percentage, policy accuracy, violation trends, and containment efficiency.
• Maintain detailed documentation of network maps, policy configurations, agent deployments, and integration touchpoints.
• Collaborate with cross-domain SMEs (WAF, EDR, DLP, SOAR, SIEM) to align segmentation with enterprise Zero Trust and Defense-in-Depth strategies.
• Propose enhancements to automation, orchestration, and analytics workflows through PowerShell, Python, or API-based integrations.

• In-depth hands-on experience with Akamai Guardicore Centra platform - segmentation, policy enforcement, and agent deployment.
• Strong understanding of Zero Trust segmentation, lateral movement prevention, and east-west traffic control.
• Expertise in network protocols, ports, and services (TCP/IP, DNS, HTTP/S, RDP, SMB, SQL, etc.).
• Experience managing Windows and Linux workloads in both on-premises and cloud (Azure/AWS) environments.
• Familiarity with firewalls, EDR, and SIEM platforms for data correlation and alert triage.
• Ability to analyze packet captures (PCAPs) and use network visualization tools for dependency mapping.
• Scripting or automation experience (PowerShell, Python, REST APIs) for agent management or reporting automation.
• Working knowledge of WAF, CASB, and SOAR tools to integrate segmentation data into broader security workflows.
• Understanding of microservices, container environments (Kubernetes, Docker) and segmentation in modern architectures.