Platform Security Architect

Job Summary

We are seeking a Platform Security Architect to serve as a trusted advisor, shaping how security is embedded into modern private cloud and platform engineering environments.

This role sits at the intersection of platform engineering, DevSecOps, and developer experience, with a strong emphasis on advisory, architecture definition, and governance. You will bring deep real-world delivery experience to ensure that recommendations are practical, scalable, and proven in production.

You will support Consult-led opportunities across the full lifecycle (pre- and post-sale), working with clients on first-of-a-kind private cloud migration and modernization initiatives, including navigating sovereignty requirements and evolving regulatory landscapes.

To our clients, you are the subject matter expert-engaging early, shaping the solution, defining architecture, and ultimately leading technical delivery.

Key Responsibilities

The Platform Security Architect is responsible for advising clients on the design and security of modern private cloud and platform engineering environments by defining target-state architectures, enforceable standards, and non-bypassable security guardrails. This includes shaping secure Internal Developer Platforms (IDPs), embedding policy-as-code governance, and establishing repeatable "golden paths" that enforce secure-by-default patterns across applications, Kubernetes, and infrastructure. The role also addresses the emerging threat of AI-accelerated vulnerability exploitation (informed by frameworks such as Mythos / Project Glasswing), defining architecture and controls that close the gaps adversaries can find and weaponize faster using AI - including accelerated vulnerability discovery, automated exploit chaining, and compressed attack timelines - so that platform defenses are hardened against machine-speed threats rather than human-speed ones. A key focus is reducing configuration variability, minimizing attack surfaces, and ensuring that security is inherently built into platform design rather than applied reactively.

In addition, the role drives end-to-end DevSecOps and runtime security transformation by integrating security controls into CI/CD pipelines, identity and access architectures, secrets management, and software and AI/ML supply chains. This includes architecting developer-facing tooling and testing capabilities that keep pace with todays AI-accelerated vulnerability landscape - enabling developers to identify, validate, and remediate exploitable weaknesses at the speed adversaries now operate at, rather than relying on traditional review cycles that assume human-speed attack timelines. The role further defines control frameworks, embeds continuous compliance, enables behavior-based runtime detection, and integrates real-time security feedback into developer workflows to maintain velocity without compromising governance. The architect also leads client engagements across pre- and post-sale phases-shaping solutions, guiding large-scale private cloud modernization programs (including sovereignty and regulatory requirements), and supporting go-to-market efforts through workshops, pilots, and thought leadership that advance Kyndryls platform security and AI-risk mitigation capabilities.

Your being you section content has been retained as part of the candidate-centric narrative to reflect the original intent of the posting.

Being You

You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.

Required Qualifications

• 8+ years in platform architecture, platform engineering, or security engineering, with a strong advisory focus
• Demonstrated experience designing and guiding platform transformations, not just implementing them
• Deep expertise in DevSecOps practices, secure software delivery, and CI/CD pipeline security integration
• Strong background in Kubernetes security and platform design principles
• Experience defining policy-as-code, governance models, and security frameworks
• Hands-on experience with identity, access control, and secrets management, informing advisory credibility
• Experience addressing AI-accelerated attack patterns or advising on emerging AI-driven threat models, including architecting defenses and developer tooling that close vulnerability windows at machine speed

Preferred Qualifications

• Experience advising on VMware Cloud Foundation (VCF), NSX, vDefend or other private cloud platforms
• Exposure to AI-enabled security tooling and modern threat response models
• Experience with Internal Developer Platforms (e.g., Backstage) in design or advisory contexts
• Experience with behavior-based or runtime detection capabilities
• Experience supporting pre-sales or client advisory engagements, including workshops, pilots, and solution shaping
• Familiarity with sovereignty and regulatory requirements in large-scale cloud modernization programs

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.