Security Architect

**Who We Are**

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

**The Role**

We are seeking a Security Architect who will join our team and take the lead on developing, implementing, and maintaining our security strategy within our Service Provider organization.

As our Security Architect, you will work closely with our leadership team to design and implement effective security solutions that not only protect our business objectives and regulatory requirements but also provide innovative solutions to stay ahead of emerging threats.
- Work with Project and Customer resources to continue design and deployment activities and further enhance the PAM solution.
- Design the Architecture for PAM Solutions using BeyondTrust products. Installation and configuration of PasswordSafe & Secure Remote Access appliance and its administration.
- Onboard the servers into BeyondTrust PAM Solution for managing the privilege IDs in the servers and Ensure that least privilege model is pursued. Configuration of smart rules and worflows for managing the PAM environment.
- Configuration of Access policies, session policies and group policies in BeyondTrust PAM Solutions.
- Enable session recording and generation of required reports as per customer audit requirements.
- Configure and manage session monitoring using BeyondTrust Password Safe, including keystroke logging and video capture.
- Utilize Beyond Insight to generate advanced analytical reports and audit-ready dashboards in alignment with customer compliance requirements. Optimize session reporting and archiving of session records and ensure the customers security policy requirements.
- Install and configure the software for ensuring the privilege access management for unix & linux environment.
- Implementation of SAML or OAuth for SSO with BeyondTrust Appliances. Demonstrate strong project delivery experience with regard to estimates, planning and deliverables using project management methodologies Provides mentoring and guidance to junior engineers
- Perform assessment and IGA roadmap for clients
- Help shape proposal for BT deployments and assessments
- Help shape statements of work for BT related work
- Deploy BeyondTrust components in cloud environments (AWS, Azure, GCP). Integrate BeyondTrust Password Safe with cloud directories (e.g., Azure AD). Enable SAML/OAuth-based SSO for cloud-native authentication.
- Configure VPN-less secure remote access to cloud-hosted resources. Ensure high availability and failover setup in multi-region cloud deployments.
- Implement PAM controls for cloud-native workloads (VMs, containers, etc.). Set up encrypted storage and backup of PAM data in the cloud.Configure logging and event forwarding to cloud-native SIEM solutions.

At the forefront of security trends and technologies, you will advise our senior leadership team on the latest security best practices, and stay ahead of emerging security threats, always keeping our organization one step ahead. Join us on this exciting journey of securing our Service Provider organization and protecting our customer’s assets.

Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from a Junior Architect to Principal Architect - we have opportunities for that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms.

**Who You Are**

You’re good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you’re open and borderless - naturally inclusive in how you work with others.

Required Technical and Professional Expertise
- Senior Level architect with demonstrable experience of 6-8 years in BeyondTrust Privileged Access Management solutions like Secure Remote Access (SRA), PasswordSafe, ActiveDirectory Bridge, Privilege Management for Unix & Linux both on-prem and on cloud.
- Experience of using BeyondTrust to secure privileged credentials, sessions and endpoints against cyber threats.
- Good general understanding of Identity & Access Management concepts.
- Understanding of client security and risk posture of the client.
- Exeprience in implementig the functional and non-functional requirements of PAM system.
- BeyondTrust certification in either of tools like Secure Remote Access (SRA), PasswordSafe, ActiveDirectory Bridge, Privilege Management for Unix & Linux.
- Experience in handling incidents, service requests and changes as per ITIL principles.

Preferred Technical and Pro