Security Architect

Kyndryl; España; Presencial; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

A leading technology services company in Spain is seeking a Zero Trust, Network & Cloud Security Architect to design and implement security solutions for diverse client environments. The ideal candidate will have over 8 years of experience in cybersecurity, strong skills in cloud security, and a robust ability to consult stakeholders. This role emphasizes network security, identity management, and DevSecOps practice, ensuring secure, modern infrastructures. Join us to be part of a team committed to advancing cybersecurity!

Servicios

Employee learning programs

Volunteering opportunities

Diversity and inclusion initiatives

Formación

• 8+ years of hands-on experience in Cybersecurity, focused on Network Security, Cloud Security, Identity & Access Management, and Security Architecture.
• Design and hardening of architectures on AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Experience with Next-Generation Firewalls, VPN, WAF, proxies, IPS/IDS.

Responsabilidades

• Assess current security postures across network, cloud, and identity.
• Design secure architectures for hybrid and multi-cloud environments.
• Lead workshops, perform assessments, present recommendations.

Conocimientos

Cybersecurity

Network Security

Cloud Security

Identity & Access Management

DevSecOps

Consulting & Stakeholder Management

Educación

Cloud certifications (AWS, Azure, GCP)

Security/network certifications

Herramientas

AWS

Microsoft Azure

Google Cloud Platform (GCP)

Terraform

Descripción del empleo

Who We Are

At Kyndryl, we design, build, manage and modernize the mission‑critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Kyndryl's Security organization is a critical practice, ensuring enterprises, regardless of their size and complexity, remain secure, available and protected against modern cyber threats. We take cybersecurity seriously. We are committed not only to advanced security services and technologies, but also to empowering communities with essential cyber skills.

When you join Kyndryl, you are not only joining a team; you are becoming part of a legacy. At Kyndryl, cybersecurity is not just a job – it is a passion and a commitment to designing, running and managing the most modern and secure technology infrastructure that the world depends on every day.

As a Zero Trust, Network & Cloud Security Architect with strong consulting skills, you will be at the core of how our customers secure their environments. You will combine deep technical expertise in Zero Trust, network security, cloud security, DevSecOps and identity and access management with the ability to engage customers, understand their challenges and guide them through security transformation.

In this role, you will not only define controls – you will advise, design and lead:

• Assess current security postures across network, cloud and identity.
• Define target Zero Trust architectures for users, devices, workloads, applications and networks.
• Design secure architectures for hybrid and multi‑cloud environments (e.g. Azure, AWS, GCP).
• Define secure patterns for connectivity, remote access, segmentation and edge security.
• Integrate security into DevOps practices and CI/CD pipelines (DevSecOps).
• Design and enhance identity, access and privileged access models.

You will work closely with customer stakeholders, architects and technical teams to translate business and risk requirements into concrete architectures, patterns and roadmaps. You will lead workshops, perform assessments, present recommendations and create reference architectures and technical documentation. You will also support delivery and implementation teams to ensure that the intended design is correctly realized.

In Kyndryl's Zero Trust, Network & Cloud Security Architecture team, you are not just securing today's environments – you are helping customers modernize and standardize how they protect access, workloads and connectivity.

Who You Are

• 8+ years of hands‑on experience in Cybersecurity, focused on Network Security, Cloud Security, Identity & Access Management, and Security Architecture.
• Cloud Security
  • Design and hardening of architectures on AWS, Microsoft Azure, and Google Cloud Platform (GCP).
  • Definition of secure landing zones, use of native cloud security services (CSPM, CIEM, workload protection, key management).
• Zero Trust & Access Security
  • Design and implementation of Zero Trust architectures for users, devices, applications, and networks.
  • Definition of identity‑based access policies, least‑privilege and continuous verification.
• Network Security & SASE
  • Experience with Next‑Generation Firewalls, VPN, WAF, proxies, IPS/IDS, and hybrid (on‑prem and cloud) network segmentation.
  • Design and integration of SASE / SSE / ZTNA solutions for secure remote and edge access.
• Identity & Access Management (IAM / PAM)
  • Integration of IdP, SSO, MFA, and conditional access policies in hybrid environments.
  • Design of RBAC models, privileged identity management and PAM solutions.
• DevSecOps
  • Integration of security controls into CI/CD pipelines.
  • Infrastructure as Code (IaC) security (e.g. Terraform, ARM/Bicep, CloudFormation).
  • Container and image security across the development lifecycle.
• Standards & Architecture Design
  • Application of security best practices and frameworks (Zero Trust principles, NIST‑style controls, vendor/cloud hardening guides).
  • Ability to produce clear architecture diagrams, design patterns, and technical documentation.
• Consulting & Stakeholder Management
  • Leading workshops, assessments, and discovery sessions with customers.
  • Translating business and risk requirements into actionable security architectures and roadmaps.
  • Presenting recommendations to both technical and non‑technical audiences.
• Certifications (held or targeted)
  • Cloud certifications (AWS, Azure, GCP – Architect / Security).
  • Security and network certifications (e.g. CCSP/CCSK, vendor firewall/SASE, or other security/architecture certifications).

Being You

Diversity is a whole lot more than what we look like or where we come from; it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single‑handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.

What You Can Expect

With state‑of‑the‑art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well‑being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company‑wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non‑profit organizations. At Kyndryl, we invest heavily in you; we want you to succeed so that together, we will all succeed.

Get Referred!

If you know someone that works at Kyndryl, when asked "How Did You Hear About Us" during the application process, select "Employee Referral" and enter your contact's Kyndryl email address.