Network and Security SME

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

As a System Administrator at Kyndryl, you'll solve complex problems and identify potential future issues across the spectrum of platforms and services. You'll be at the forefront of new technology and modernization, working with some of our biggest clients - which means some of the biggest in the world.

We are looking for a skilled Senior Network Security Engineer with strong expertise in Palo Alto NGFWs, centralized management via Panorama, Skybox/Tufin Tool, Arista Network and Global Protect VPN solutions. The role requires hands-on operational management with architect-level design and implementation experience , ensuring our firewall and Network infrastructure is both resilient and aligned with business needs. The ideal candidate will act as an operations expert, handling critical incidents while mentoring junior engineers and ensuring the stability of enterprise environments.

There's never a typical day as a System Administrator at Kyndryl, because no two projects are alike. You'll be managing systems data for clients and providing day-to-day solutions and security compliance. You'll oversee a queue of assignments and work directly with technicians, prioritizing tickets to deliver the best solutions to our clients.

One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You'll also get the chance to share your expertise by recommending modernization options, identifying new business opportunities, and cultivating relationships with other teams and stakeholders. Does the work get challenging at times? Yes! But you'll collaborate with a diverse group of talented people and gain invaluable management and organizational skills, which will come in handy as you move forward in your career.

Your future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Who You Are

You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.

• Having 10+ years of experience in network and security operations.
• Configure, manage, and troubleshoot Palo Alto Next-Generation Firewalls (NGFWs), including security policies, NAT, VPNs (IPSec/SSL), URL filtering, and threat prevention.
• Manage Panorama for centralized policy and log management.
• Manage firewall policies, NAT, SSL decryption, URL filtering, threat prevention, and logging/reporting.
• Administer Panorama for centralized firewall management, including policy creation, device group management, templates, and software upgrades
• Proficiency in configuring security profiles (URL filtering, Anti-Spyware, Threat Prevention, WildFire).
• Troubleshooting using CLI and packet captures on Palo Alto devices.
• In Depth Understanding of Palo Alto High Availability.
• Create and configure Global Protect remote VPN
• Troubleshooting Wildfire issue
• In Depth knowledge of App-ID , Content -ID and User-ID
• Good understanding of networking fundamentals (TCP/IP, routing, NAT, VLANs, IPSec/SSL).
• Maintain documentation, Run books for designs, configurations, and operational procedures.
• Review firewall policy /compliance configuration via Skybox.
• Monitor and resolve firewall health, logs, and alerts; escalate and resolve incidents in line with SLAs.
• Configure, deploy, and manage Arista EOS-based switches and routers in data center and enterprise environments.
• Design and implement spine-leaf architectures, VXLAN/EVPN overlays, and MLAG for scalable, resilient networks.
• Configure and troubleshoot routing protocols (BGP, OSPF, IS-IS, eBGP/iBGP) and VRFs.
• Deploy, integrate, and operate Arista Cloud Vision for centralized management, automation, compliance, and telemetry.
• Working knowledge of Cloud Network technologies (Azure, AWS, GCP and others)
• Perform rule analysis, optimization, and compliance reporting using Skybox and Tufin platforms.
• Mentor junior engineers and act as an escalation point for complex operational issues.

• Proven expertise with Palo Alto Firewalls (Panorama, Global Protect, threat prevention, HA)
• Strong experience in Skybox and Tufin for firewall policy management, optimization, and compliance reporting.
• Solid hands-on background with Arista Routing & Switching platforms.
• Deep understanding of networking & security protocols: IPS/IDS, SSL/TLS, BGP, OSPF, VXLAN, segmentation.
• Proficiency with troubleshooting tools: Wireshark, tcpdump, NetFlow, Cloud Vision Telemetry.
• Familiarity with automation/scripting (Python, Ansible, APIs) is an advantage.
• Strong troubleshooting and problem-solving skills.
• Ability to work independently under pressure while collaborating with cross-functional teams.
• Good communication skills for coordination and escalation handling.
• Detail-oriented with strong documentation and process discipline.
• Certifications preferred: PCNSE (Palo Alto), Arista ACE/CCNP/CCIE, Skybox/Tufin certifications, CISSP.