Platform Security Architect

Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.  We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role We are seeking a Platform Security Architect to serve as a trusted advisor, shaping how security is embedded into modern private cloud and platform engineering environments. This role sits at the intersection of platform engineering, DevSecOps, and developer experience, with a strong emphasis on advisory, architecture definition, and governance. You will bring deep real-world delivery experience to ensure that recommendations are practical, scalable, and proven in production. You will support Consult-led opportunities across the full lifecycle (pre- and post-sale), working with clients on first-of-a-kind private cloud migration and modernization initiatives, including navigating sovereignty requirements and evolving regulatory landscapes. To our clients, you are the subject matter expert—engaging early, shaping the solution, defining architecture, and ultimately leading technical delivery. Key Responsibilities The Platform Security Architect is responsible for advising clients on the design and security of modern private cloud and platform engineering environments by defining target-state architectures, enforceable standards, and non-bypassable security guardrails. This includes shaping secure Internal Developer Platforms (IDPs), embedding policy-as-code governance, and establishing repeatable "golden paths" that enforce secure-by-default patterns across applications, Kubernetes, and infrastructure. The role also addresses the emerging threat of AI-accelerated vulnerability exploitation (informed by frameworks such as Mythos / Project Glasswing), defining architecture and controls that close the gaps adversaries can find and weaponize faster using AI — including accelerated vulnerability discovery, automated exploit chaining, and compressed attack timelines — so that platform defenses are hardened against machine-speed threats rather than human-speed ones. A key focus is reducing configuration variability, minimizing attack surfaces, and ensuring that security is inherently built into platform design rather than applied reactively. In addition, the role drives end-to-end DevSecOps and runtime security transformation by integrating security controls into CI/CD pipelines, identity and access architectures, secrets management, and software and AI/ML supply chains.