Cloud Security Engineer

Company Overview

Kyndryl is the world's largest IT infrastructure services provider, designing, building, managing, and modernizing critical technology systems globally. Operating in 60+ countries, it serves industries like banking, healthcare, retail, and telecom with cloud, cybersecurity, AI, and digital transformation solutions.

Job Summary

This technical role requires you to lead cloud security initiatives by consulting clients, designing secure cloud solutions, and driving risk assessments to ensure compliance and resilience across AWS and Azure public sector environments.

Responsibilities

• Conduct cloud security assessments, architecture reviews, and risk evaluations for public sector cloud environments on AWS and Azure
• Design, implement, and maintain secure cloud architectures, landing zones, guardrails, and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers, and platform components following approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks, and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets, and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity, and encryption
• Maintain cloud security monitoring, logging, and alerting capabilities to support threat detection, investigation, and incident response
• Collaborate with Cloud, DevOps, and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews, and remediation tracking for workloads deployed on AWS and Azure
• Conduct compliance reviews to ensure adherence to security policies, public sector requirements, data residency controls, and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect lifecycle
• Improve cloud security processes, standards, playbooks, and tools to enhance security posture and operational efficiency
• Assume secondary roles as DevSecOps Engineer or Cloud Platform Security Engineer as required by project needs
• Collaborate cross-functionally to enhance security across cloud development and operations pipelines

Preferred competencies and qualifications

• Experience with AWS and Azure, including GCC and public sector/regulated cloud environments
• Experience designing secure cloud architectures, landing zones, account/subscription segregation, and cloud governance
• Experience working in agile development environments
• Experience with CI/CD tools such as GitLab, Azure DevOps, GitHub Actions, Jenkins, or similar
• Experience with Infrastructure as Code tools like Terraform, CloudFormation, Bicep, ARM templates, or equivalents
• Experience with AWS security services including IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF, or equivalents
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall, or equivalents
• Experience with CSPM, CWPP, CNAPP tools like Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca, or equivalents
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection, and secrets management
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response, and cloud logging
• Experience with vulnerability management and cloud-native security testing tools including SAST, DAST, SCA, secrets scanning, or equivalents
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS, and applicable GCC/public sector regulations
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM, or equivalents
• Security testing certifications such as CEH, OSCP, GPEN, GWAPT, or equivalents
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology, or related disciplines