Platform Security Architect

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.  We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

We are seeking a Platform Security Architect to serve as a trusted advisor, shaping how security is embedded into modern private cloud and platform engineering environments. This role sits at the intersection of platform engineering, DevSecOps, and developer experience, with a strong emphasis on advisory, architecture definition, and governance. You will bring deep real-world delivery experience to ensure that recommendations are practical, scalable, and proven in production. You will support Consult-led opportunities across the full lifecycle (pre- and post-sale), working with clients on first-of-a-kind private cloud migration and modernization initiatives, including navigating sovereignty requirements and evolving regulatory landscapes. To our clients, you are the subject matter expert—engaging early, shaping the solution, defining architecture, and ultimately leading technical delivery.

The Platform Security Architect is responsible for advising clients on the design and security of modern private cloud and platform engineering environments by defining target-state architectures, enforceable standards, and non-bypassable security guardrails. This includes shaping secure Internal Developer Platforms (IDPs), embedding policy-as-code governance, and establishing repeatable "golden paths" that enforce secure-by-default patterns across applications, Kubernetes, and infrastructure. The role also addresses the emerging threat of AI-accelerated vulnerability exploitation (informed by frameworks such as Mythos / Project Glasswing), defining architecture and controls that close the gaps adversaries can find and weaponize faster using AI — including accelerated vulnerability discovery, automated exploit chaining, and compressed attack timelines — so that platform defenses are hardened against machine-speed threats rather than human-speed ones. A key focus is reducing configuration variability, minimizing attack surfaces, and ensuring that security is inherently built into platform design rather than applied reactively. In addition, the role drives end-to-end DevSecOps and runtime security transformation by integrating security controls into CI/CD pipelines, identity and access architectures, secrets management, and software and AI/ML supply chains. This includes architecting developer-facing tooling and testing capabilities that keep pace with today's AI-accelerated vulnerability landscape — enabling developers to identify, validate, and remediate exploitable weaknesses at the speed adversaries now operate at, rather than relying on traditional review cycles that assume human-speed attack timelines. The role further defines control frameworks, embeds continuous compliance, enables behavior-based runtime detection, and integrates real-time security feedback into developer workflows to maintain velocity without compromising governance. The architect also leads client engagements across pre- and post-sale phases—shaping solutions, guiding large-scale private cloud modernization programs (including sovereignty and regulatory requirements), and supporting go-to-market efforts through workshops, pilots, and thought leadership that advance Kyndryl's platform security and AI-risk mitigation capabilities. Your future at Kyndryl This role opens the door to many career paths, both vertical and horizontal, and there may be opportunity to travel. It’s a great chance