Senior Cybersecurity Consultant - Zero Trust Architectures

About the role

Kyndryl is looking for a Cybersecurity Consultant specialising in Zero Trust architectures, combining deep technical execution with strategic vision. You will drive security transformation projects in international client environments, designing and implementing end-to-end Zero Trust architectures from maturity assessment to the deployment of identity, microsegmentation and access control. This is a high-impact individual contributor role focused on technical leadership, client advisory and solution design.

Key responsibilities

• Define and implement Zero Trust adoption strategies and roadmaps aligned with NIST SP 800-207 and the CISA Zero Trust Maturity Model
• Design reference architectures covering identity, devices, networks, applications/workloads and data
• Conduct maturity assessments and turn them into risk-prioritised implementation plans
• Implement ZTNA solutions and integrate IAM, MFA, conditional access and least privilege models
• Design and deploy network and workload microsegmentation, and integrate CASB, CWPP, SSE/SASE and data protection controls
• Manage security projects and define identity management, change management and hardening processes
• Validate architectures through phishing, ransomware and red teaming tests and response simulations
• Align implementations with GDPR, ENS, NIS2, DORA and ISO 27001, and take part in pre-sales and technical proposals

Required profile

• Degree in Telecommunications Engineering, Computer Science/Software Engineering or equivalent
• Minimum 6 years in cybersecurity projects, with proven experience designing or implementing Zero Trust architectures internationally
• Hands-on experience in several of the listed areas
• Advanced English (written and spoken)
• Certifications such as CISSP, CISM, CCSP or vendor ones (Zscaler, Microsoft, Palo Alto, Okta) are preferred

Required skills

• IAM/MFA, ZTNA, microsegmentation, SASE/SSE, cloud security (Azure, AWS or GCP)
• NIST frameworks and Zero Trust maturity models
• DevSecOps and Infrastructure as Code (preferred)