Cloud & AI Security Architect

Stack

Responsibilities

• ▹Architect and implement secure cloud foundations (landing zones, identity, network segmentation, logging pipelines, key management, secrets handling)
• ▹Engineer cloud security controls and automate compliance validation with policy-as-code
• ▹Build AI-powered security capabilities: SOC investigation and triage copilots, automated alert enrichment and case summarization, detection engineering accelerators, SOAR workflow augmentation, anomaly detection on security telemetry
• ▹Design secure GenAI architectures: RAG patterns with secure data access, model gateway controls, prompt and data protection, tenant isolation, telemetry, monitoring and evaluation
• ▹Integrate enterprise security platforms (SIEM/SOAR, CNAPP/CSPM, CIEM, IAM/PAM, EDR/XDR) into cohesive architectures and automated workflows
• ▹Develop reusable assets: reference implementations, accelerators, pipelines and templates
• ▹Collaborate with client SOC, cloud platform and application teams to operationalize solutions
• ▹Support DevSecOps practices: secure CI/CD, IaC scanning, container security and Kubernetes guardrails
• ▹Conduct security assessments, audits and due diligence with customers and vendors, and review IT infrastructure and applications for secure design

Requirements

• ▹5+ years of experience in cybersecurity and/or cloud security with strong hands-on engineering exposure
• ▹Practical experience with AWS/Azure/GCP security services and cloud-native patterns
• ▹Understanding of cloud logging/telemetry, encryption and key management, network security, identity and access controls
• ▹Experience prototyping or delivering AI-enabled solutions (analytics, automation, copilots, detection acceleration)
• ▹Familiarity with RAG, embeddings, secure prompt/data handling and AI telemetry
• ▹Familiarity with SIEM/SOAR engineering, playbook design, API integrations and workflow automation
• ▹Scripting/engineering skills (e.g. Python) and comfort working with APIs and data pipelines
• ▹IaC (Terraform, CloudFormation, ARM/Bicep), CI/CD integration, container/Kubernetes security exposure
• ▹Ability to produce implementable designs (diagrams, patterns, reference implementations) and support delivery teams

Nice to have

• ▹Exposure to MLOps/LLMOps practices (deployment, evaluation, drift/quality monitoring, change control)
• ▹Security certifications (CCSP/CCSK, CISSP or equivalent)
• ▹Cloud certifications (architect/security)

Soft skills

What we offer

• ▹Salary range of EUR 54,600 to 98,150 for a full-time schedule
• ▹Permanent employment contract may be offered
• ▹Investment in learning, training and career growth

About the company

Kyndryl runs and reimagines the mission-critical technology systems of the world's leading businesses.