Security Architect

Who We Are At Kyndryl, we design, build, manage and modernize the mission‑critical technology systems that the world depends on every day. We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The Role Kyndryl’s Security organization is a critical practice, ensuring enterprises remain secure, available and protected against modern cyber threats. As a Zero Trust, Network & Cloud Security Architect with strong consulting skills, you will be at the core of how our customers secure their environments. You will combine deep technical expertise in Zero Trust, network security, cloud security, DevSecOps and identity and access management with the ability to engage customers, understand their challenges and guide them through security transformation. Responsibilities Assess current security postures across network, cloud and identity. Define target Zero Trust architectures for users, devices, workloads, applications and networks. Design secure architectures for hybrid and multi‑cloud environments (Azure, AWS, GCP). Define secure patterns for connectivity, remote access, segmentation and edge security. Integrate security into DevOps practices and CI/CD pipelines (DevSecOps). Design and enhance identity, access and privileged access models. Lead workshops, perform assessments, present recommendations and create reference architectures and technical documentation. Support delivery and implementation teams to ensure that the intended design is correctly realized. Who You Are 8+ years of hands‑on experience in Cybersecurity, focused on Network Security, Cloud Security, Identity & Access Management, and Security Architecture. Design and hardening of architectures on AWS, Microsoft Azure, and Google Cloud Platform (GCP). Definition of secure landing zones, use of native cloud security services (CSPM, CIEM, workload protection, key management). Design and implementation of Zero Trust architectures for users, devices, applications and networks. Definition of identity‑based access policies, least‑privilege and continuous verification. Experience with Next‑Generation Firewalls, VPN, WAF, proxies, IPS/IDS, and hybrid network segmentation. Design and integration of SASE / SSE / ZTNA solutions for secure remote and edge access. Integration of IdP, SSO, MFA, and conditional access policies in hybrid environments. Design of RBAC models, privileged identity management and PAM solutions. Integration of security controls into CI/CD pipelines. Infrastructure as Code (IaC) security (Terraform, ARM/Bicep, CloudFormation). Container and image security across the development lifecycle. Application of security best practices and frameworks (Zero Trust principles, NIST‑style controls, vendor/cloud hardening guides). Ability to produce clear architecture diagrams, design patterns, and technical documentation. Leading workshops, assessments, and discovery sessions with customers. Translating business and risk requirements into actionable security architectures and roadmaps. Presenting recommendations to both technical and non‑technical audiences. Certifications: Cloud (AWS, Azure, GCP – Architect / Security) and security/network (e.g., CCSP/CCSK, vendor firewall/SASE). Benefits Kyndryl cares about your well‑being and offers benefits that support your diversity, learning and volunteer interests. We invest heavily in your success and provide access to industry‑leading learning programs and certifications. #J-18808-Ljbffr