Platform Security Architect

Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.

We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge.

For our people—Kyndryls—that means doing purposeful work that powers human progress.

Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role We are seeking a Platform Security Architect to serve as a trusted advisor, shaping how security is embedded into modern private cloud and platform engineering environments.

This role sits at the intersection of platform engineering, DevSecOps, and developer experience, with a strong emphasis on advisory, architecture definition, and governance.

You will bring deep real-world delivery experience to ensure that recommendations are practical, scalable, and proven in production.

You will support Consult-led opportunities across the full lifecycle (pre- and post-sale), working with clients on first-of-a-kind private cloud migration and modernization initiatives, including navigating sovereignty requirements and evolving regulatory landscapes.

To our clients, you are the subject matter expert—engaging early, shaping the solution, defining architecture, and ultimately leading technical delivery.

Key Responsibilities The Platform Security Architect is responsible for advising clients on the design and security of modern private cloud and platform engineering environments by defining target-state architectures, enforceable standards, and non-bypassable security guardrails.

This includes shaping secure Internal Developer Platforms (IDPs), embedding policy-as-code governance, and establishing repeatable "golden paths" that enforce secure-by-default patterns across applications, Kubernetes, and infrastructure.

The role also addresses the emerging threat of AI-accelerated vulnerability exploitation (informed by frameworks such as Mythos / Project Glasswing), defining architecture and controls that close the gaps adversaries can find and weaponize faster using AI — including accelerated vulnerability discovery, automated exploit chaining, and compressed attack timelines — so that platform defenses are hardened against machine-speed threats rather than human-speed ones.

A key focus is reducing configuration variability, minimizing attack surfaces, and ensuring that security is inherently built into platform design rather than applied reactively.

In addition, the role drives end-to-end DevSecOps and runtime security transformation by integrating security controls into CI/CD pipelines, identity and access architectures, secrets management, and software and AI/ML supply chains.

This includes architecting developer-facing tooling and testing capabilities that keep pace with today's AI-accelerated vulnerability landscape — enabling developers to identify, validate, and remediate exploitable weaknesses at the speed adversaries now operate at, rather than relying on traditional review cycles that assume human-speed attack timelines.

The role further defines control frameworks, embeds continuous compliance, enables behavior-based runtime detection, and integrates real-time security feedback into developer workflows to maintain velocity without compromising governance.

The architect also leads client engagements across pre- and post-sale phases—shaping solutions, guiding large-scale private cloud modernization programs (including sovereignty and regulatory requirements), and supporting go-to-market efforts through workshops, pilots, and thought leadership that advance Kyndryl's platform security and AI-risk mitigation capabilities.

Your future at Kyndryl This role opens the door to many career paths, both vertical and horizontal, and there may be opportunity to travel.

It’s a great chance for database administrators or other techs to break into the cloud.

It’s also a solid path to become enterprise or chief architect or a distinguished engineer!

Whatever you see for yourself, you’ll find the opportunity here.

Who You Are You’re good at what you do and possess the required experience to prove it.

However, equally as important – you have a growth mindset; keen to drive your own personal and professional development.

You are customer-focused – someone who prioritizes customer success in their work.

And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Qualifications 8+ years in platform architecture, platform engineering, or security engineering, with a strong advisory focus Demonstrated experience designing and guiding platform transformations, not just implementing them Deep expertise in DevSecOps practices, secure software delivery, and CI/CD pipeline security integration Strong background in Kubernetes security and platform design principles Experience defining policy-as-code, governance models, and security frameworks Hands-on experience with identity, access control, and secrets management, informing advisory credibility Experience addressing AI-accelerated attack patterns or advising on emerging AI-driven threat models, including architecting defenses and developer tooling that close vulnerability windows at machine speed Preferred Qualifications Experience advising on VMware Cloud Foundation (VCF), NSX, vDefend or other private cloud platforms Exposure to AI-enabled security tooling and modern threat response models Experience with Internal Developer Platforms (e.g., Backstage) in design or advisory contexts Experience with behavior-based or runtime detection capabilities Experience supporting pre-sales or client advisory engagements, including workshops, pilots, and solution shaping Familiarity with sovereignty and regulatory requirements in large-scale cloud modernization programs Being You The “Kyn” in Kyndryl means kinship, wh