Security Architect

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Kyndryl's Security organization is a critical practice, ensuring enterprises, regardless of their size and complexity, remain secure, available and protected against modern cyber threats. We take cybersecurity seriously. We are committed not only to advanced security services and technologies, but also to empowering communities with essential cyber skills.

When you join Kyndryl, you are not only joining a team; you are becoming part of a legacy. At Kyndryl, cybersecurity is not just a job - it is a passion and a commitment to designing, running and managing the most modern and secure technology infrastructure that the world depends on every day.

• Assess current security postures across network, cloud and identity.
• Define target Zero Trust architectures for users, devices, workloads, applications and networks.
• Design secure architectures for hybrid and multi-cloud environments (e.g. Azure, AWS, GCP).
• Define secure patterns for connectivity, remote access, segmentation and edge security.
• Integrate security into DevOps practices and CI/CD pipelines (DevSecOps).
• Design and enhance identity, access and privileged access models.

• 8+ years of hands-on experience in Cybersecurity, focused on Network Security, Cloud Security, Identity & Access Management, and Security Architecture.
• Cloud Security
  
  
  • Design and hardening of architectures on AWS, Microsoft Azure, and Google Cloud Platform (GCP).
  • Definition of secure landing zones, use of native cloud security services (CSPM, CIEM, workload protection, key management).
• Zero Trust & Access Security
  
  
  • Design and implementation of Zero Trust architectures for users, devices, applications, and networks.
  • Definition of identity-based access policies, least-privilege and continuous verification.
• Network Security & SASE
  
  
  • Experience with Next-Generation Firewalls, VPN, WAF, proxies, IPS/IDS, and hybrid (on-prem and cloud) network segmentation.
  • Design and integration of SASE / SSE / ZTNA solutions for secure remote and edge access.
• Identity & Access Management (IAM / PAM)
  
  
  • Integration of IdP, SSO, MFA, and conditional access policies in hybrid environments.
  • Design of RBAC models, privileged identity management and PAM solutions.
• DevSecOps
  
  
  • Integration of security controls into CI/CD pipelines.
  • Infrastructure as Code (IaC) security (e.g. Terraform, ARM/Bicep, CloudFormation).
  • Container and image security across the development lifecycle.
• Standards & Architecture Design
  
  
  • Application of security best practices and frameworks (Zero Trust principles, NIST-style controls, vendor/cloud hardening guides).
  • Ability to produce clear architecture diagrams, design patterns, and technical documentation.
• Consulting & Stakeholder Management
  
  
  • Leading workshops, assessments, and discovery sessions with customers.
  • Translating business and risk requirements into actionable security architectures and roadmaps.
  • Presenting recommendations to both technical and non-technical audiences.
• Certifications (held or targeted)
  
  
  • Cloud certifications (AWS, Azure, GCP - Architect / Security).
  • Security and network certifications (e.g. CCSP/CCSK, vendor firewall/SASE, or other security/architecture certifications).