Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

We are seeking a Security Architect who will join our team and take the lead on developing, implementing, and maintaining our security strategy within our Service Provider organization. 

As our Security Architect, you will work closely with our leadership team to design and implement effective security solutions that not only protect our business objectives and regulatory requirements but also provide innovative solutions to stay ahead of emerging threats.

Work with Project and Customer resources to continue design and deployment activities and further enhance the PAM solution.Design the Architecture for PAM Solutions using BeyondTrust products. Installation and configuration of PasswordSafe & Secure Remote Access appliance and its administration.Onboard the servers into BeyondTrust PAM Solution for managing the privilege IDs in the servers and Ensure that least privilege model is pursued. Configuration of smart rules and worflows for managing the PAM environment.Configuration of Access policies, session policies and group policies in BeyondTrust PAM Solutions.Enable session recording and generation of required reports as per customer audit requirements.    Configure and manage session monitoring using BeyondTrust Password Safe, including keystroke logging and video capture.Utilize Beyond Insight to generate advanced analytical reports and audit-ready dashboards in alignment with customer compliance requirements. Optimize session reporting and archiving of session records and ensure the customers security policy requirements.Install and configure the software for ensuring the privilege access management for unix & linux environment.Configuring the privileged ids for application-to-application integration Configuring the ssh key based authentication for the prvileged ids Integration of ActiveDirectory or any LDAP Directory with BeyondTrust appliances for ensuring the centralized authentication.Implementation of SAML or OAuth for SSO with BeyondTrust Appliances. Demonstrate strong project delivery experience with regard to estimates, planning and deliverables using project management methodologies Provides mentoring and guidance to junior engineersPerform assessment and IGA roadmap for clientsHelp shape proposal for BT deployments and assessmentsHelp shape statements of work for BT related workDevelop deliverable templates and act as subject matter expert for client discussionsDeploy BeyondTrust components in cloud environments (AWS, Azure, GCP). Integrate BeyondTrust Password Safe with cloud directories (e.g., Azure AD).  Enable SAML/OAuth-based SSO for cloud-native authentication. Configure VPN-less secure remote access to cloud-hosted resources.  Ensure high availability and failover setup in multi-region cloud deployments.  Implement PAM controls for cloud-native workloads (VMs, containers, etc.).  Set up encrypted storage and backup of PAM data in the cloud.Configure logging and event forwarding to cloud-native SIEM solutions.

At the forefront of security trends and technologies, you will advise our senior leadership team on the latest security best practices, and stay ahead of emerging security threats, always keeping our organization one step ahead. Join us on this exciting journey of securing our Service Provider organization and protecting our customer’s assets.

Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from a Junior Architect to Principal Architect – we have opportunities for that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Technical and Professional Expertise

Senior Level architect with demonstrable experience of 6-8 years in BeyondTrust Privileged Access Management solutions like Secure Remote Access (SRA), PasswordSafe, ActiveDirectory Bridge, Privilege Management for Unix & Linux both on-prem and on cloud.Experience of using BeyondTrust to secure privileged credentials, sessions and endpoints against cyber threats.Good general understanding of Identity & Access Management concepts.Understanding of client security and risk posture of the client.Exeprience in implementig the functional and non-functional requirements of PAM system.BeyondTrust certification in either of tools like Secure Remote Access (SRA), PasswordSafe, ActiveDirectory Bridge, Privilege Management for Unix & Linux.Experience in handling incidents, service requests and changes as per ITIL principles.

Preferred Technical and Professional Experience

Beyond Trust certifications like PRA, password safe etc.Integration between Sailpoint and BeyondTrust for the provisioning of privileged access to administrators.Knowledge and experience in Unix, Windows, MacOS and HyperScalar administration.Understanding of cloud computing technologies, business drivers, and emerging computing trendsExperience in Root Cause analysis and problem management skills.Strong verbal and written skills to develop technical documentation and presentationsKnowledge and experience in other IAM Infrastructure products.•Relevant industry certifications such as CISSP, CISM, or CCSP•Bachelor's or master's degree in computer science, Information Security, or a related field

Being You

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations.  At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!

If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.