Security Architect (Remote in Brazil)

Kyndryl

2d • Remote

About The Position

Kyndryl is seeking a Security Architect to provide security architecture review and assurance across its Service Provider organization. The role works with business, solution architecture, engineering, and technology teams to review proposed IT solutions and assess whether security requirements have been addressed. It evaluates designs for security risks, threats, vulnerabilities, anomalous data flows and interactions, and gaps in proposed controls.

The Security Architect conducts architecture reviews, risk assessments, and threat modeling for new and changing solutions. Reviews cover proposed controls and processes in areas including identity and access management, data protection, encryption, authentication, authorization, network security, infrastructure, applications, middleware, and systems and service management. The role provides independent guidance, challenges design assumptions, recommends remediation or mitigating controls, and helps stakeholders make informed risk decisions; solution teams retain responsibility for detailed design and implementation.

The position also reviews vendors and third-party solutions for alignment with organizational security requirements and identifies risks for remediation, mitigation, or formal acceptance. In collaboration with cross-functional teams, the architect helps ensure applicable policies, standards, regulatory requirements, and architecture principles are considered throughout the technology lifecycle, and communicates risks and recommendations to technical teams, business stakeholders, and senior leadership. The role is remote in Brazil, with working hours of 9:00 AM to 6:00 PM, Monday to Friday. Kyndryl describes opportunities to develop security architecture expertise, pursue certifications, and grow within the architecture profession.

Requirements

• At least 10 years of experience in security architecture design and implementation within a Service Provider organization.
• Experience with security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
• Deep understanding of security technologies, such as firewalls, intrusion detection and prevention systems, vulnerability scanners, and endpoint protection.
• Strong knowledge of cloud security concepts and technologies, such as AWS, Microsoft Azure, and Google Cloud Platform.
• Advanced or fluent English.

Nice To Haves

• Relevant industry certifications such as CISSP, CISM, or CCSP.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.

Responsibilities

• Review proposed IT solutions and assess whether security requirements have been addressed.
• Evaluate solution designs for security risks, threats, vulnerabilities, anomalous data flows and interactions, and gaps in proposed security controls.
• Conduct security architecture reviews, risk assessments, and threat modeling for new and changing solutions.
• Review proposed security controls and processes relating to identity and access management, data protection, encryption, authentication, authorization, network security, infrastructure, applications, middleware, and systems and service management.
• Provide independent security guidance, challenge design assumptions, identify security gaps, and recommend remediation or mitigating controls.
• Help stakeholders make informed risk decisions while solution architecture, engineering, and technology teams remain responsible for solution design and implementation.
• Review vendors and third-party solutions for alignment with organizational security requirements and identify risks requiring remediation, mitigation, or formal risk acceptance.
• Work with cross-functional teams to ensure security policies, standards, regulatory requirements, and architecture principles are considered throughout the technology lifecycle.
• Communicate security risks and recommendations to technical teams, business stakeholders, and senior leadership.

Benefits

• Be Well programs supporting financial, mental, physical, and social health.
• Career development tools, personalized development goals, and continuous feedback.
• Learning opportunities, including certifications with Microsoft, Google, and Amazon, coaching, and hands-on experiences.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed