Cloud Security Engineer

Company Overview Kyndryl is the world's largest IT infrastructure services provider, designing, building, managing, and modernizing critical technology systems globally. Operating in 60+ countries, it serves industries like banking, healthcare, retail, and telecom with cloud, cybersecurity, AI, and digital transformation solutions. Job Summary This technical role requires you to lead cloud security initiatives by consulting clients, designing secure cloud solutions, and driving risk assessments to ensure compliance and resilience across AWS and Azure public sector environments. Responsibilities Conduct cloud security assessments, architecture reviews, and risk evaluations for public sector cloud environments on AWS and Azure Design, implement, and maintain secure cloud architectures, landing zones, guardrails, and baseline configurations across AWS and Azure platforms Harden cloud infrastructure, services, virtual machines, containers, and platform components following approved security standards and benchmarks Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks, and remediation activities Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets, and key management Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity, and encryption Maintain cloud security monitoring, logging, and alerting capabilities to support threat detection, investigation, and incident response Collaborate with Cloud, DevOps, and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes Perform vulnerability assessments, configuration reviews, and remediation tracking for workloads deployed on AWS and Azure Conduct compliance reviews to ensure adherence to security policies, public sector requirements, data residency controls, and cloud governance standards Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect lifecycle Improve cloud security processes, standards, playbooks, and tools to enhance security posture and operational efficiency Assume secondary roles as DevSecOps Engineer or Cloud Platform Security Engineer as required by project needs Collaborate cross-functionally to enhance security across cloud development and operations pipelines Preferred competencies and qualifications Experience with AWS and Azure, including GCC and public sector/regulated cloud environments Experience designing secure cloud architectures, landing zones, account/subscription segregation, and cloud governance Experience working in agile development environments Experience with CI/CD tools such as GitLab, Azure DevOps, GitHub Actions, Jenkins, or similar Experience with Infrastructure as Code tools like Terraform, CloudFormation, Bicep, ARM templates, or equivalents Experience with AWS security services including IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF, or equivalents Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall, or equivalents Experience with CSPM, CWPP, CNAPP tools like Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca, or equivalents Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection, and secrets management Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response, and cloud logging Experience with vulnerability management and cloud-native security testing tools including SAST, DAST, SCA, secrets scanning, or equivalents Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS, and applicable GCC/public sector regulations Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM, or equivalents Security testing certifications such as CEH, OSCP, GPEN, GWAPT, or equivalents Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology, or related disciplines