Identity & Access Management (Iam) Consultant

Kyndryl
Badajoz, Spain
2 days ago
Apply on www.buscojobs.com.es
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English

Tech stack

Active Directory Application Programming Interfaces (APIs) Artificial Intelligence Application Integration Architecture Authentication Protocols Microsoft Azure Cyber Security Identity and Access Management Information Security Management Key Management OAuth OpenID
+5 more
Security Assertion Markup Language (SAML) Cyberark Information Technology Tenable Nessus CIS Benchmarks

Job description

Who We AreAt Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.The RoleThe Identity & Access Management (IAM) Consultant will support the engineering, implementation, and hardening of enterprise identity security solutions. The role involves hands-on deployment and advisory across hybrid environments, collaborating closely with security, infrastructure, and application teams to enhance authentication, authorization, and posture management (SSPM)Who You AreMIN. REQUIRED EXPERIENCE5+ years in Cybersecurity Services, with a focus on Identity and Access Management (IAM).EDUCATION AND CERTIFICATIONBachelor’s or master’s degree in computer science, Information Security, Engineering, or equivalent experience.Highly desired certifications:SC-300 Identity & Access AdministratorSC-100 Cybersecurity ArchitectAZ-500 Microsoft Azure Security TechnologiesExperience with Tier PAM platformsLANGUAGESSpanish and English (B2 level or higher).CORE REQUIRED COMPETENCIESIdentity Lifecycle & Directory Services: Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID)Modern AuthN & AuthZ: Deep understanding of modern authentication protocols (OIDC, OAuth 2.0, SAML) and a strong focus on migration away from legacy, unsecure authentication mechanismsZero Trust Policy Design: Experience configuring Conditional Access, managed device controls, and passwordless authentication modelsPrivileged Access & Secrets Management: Practical experience with PAM platforms (e.g., CyberArk, Entra ID PIM) and the secure lifecycle management of application secretsPost-Exploitation & Hardening: Knowledge of Active Directory security posture auditing (e.g., utilizing CIS benchmarks or SSPM/identity security scanning tools)Analytical Thinking: Proven troubleshooting capabilities in high-security, highly-regulated enterprise environments.Documentation & Stakeholder Management: Ability to draft clear procedures, build test plans, and coordinate with application owners for IAM onboarding.KEY RESPONSIBILITIESEngineering and Deployment: Support the deployment and configuration of enterprise IAM architectures (Entra ID, Hybrid Active Directory, PAM integration)Secure App Onboarding: Drive application integration with SSO and Provisioning services, validating API permissions, and preventing credential/access driftVulnerability Mitigation: Help analyze, implement, and run detection mechanisms or configuration playbooks to remediate accepted risks and legacy protocolsOperational Troubleshooting: Identify, isolate, and resolve access issues across cloud identity providers, hybrid connectors, and directory replication boundaries.Collaboration & Governance: Work under the guidance of the Lead Identity Architect to implement strict controls around trust boundaries, cloud tenant configurations, and privileged accounts.Being YouThe “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging - being a valued, respected, trusted member of the team - is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.What You Can ExpectYour career with us isn’t just a job-it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health-because we know that when you feel your best, you do your best.From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute-you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities-from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.We want you to thrive here-and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.Get Referred!If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact’s Kyndryl email address.#J-*****-Ljbffr

Requirements

on Identity and Access Management (IAM), EDUCATION AND CERTIFICATIONBachelor’s or master’s degree in computer science, Information Security, Engineering, or equivalent experience.Highly desired certifications:SC-300 Identity & Access AdministratorSC-100 Cybersecurity ArchitectAZ-500 Microsoft Azure Security TechnologiesExperience with Tier PAM platformsLANGUAGESSpanish and English (B2 level or higher).CORE REQUIRED COMPETENCIESIdentity Lifecycle & Directory Services: Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID)Modern AuthN & AuthZ: Deep understanding of modern authentication protocols (OIDC, OAuth 2.0, SAML) and a strong focus on migration away from legacy, unsecure authentication mechanismsZero Trust Policy Design: Experience configuring Conditional Access, managed device controls, and passwordless authentication modelsPrivileged Access & Secrets Management: Practical experience with PAM platforms (e.g., CyberArk, Entra ID PIM) and the secure lifecycle management of application secretsPost-Exploitation & Hardening: Knowledge of Active Directory security posture auditing (e.g., utilizing CIS benchmarks or SSPM/identity security scanning tools)Analytical Thinking: Proven troubleshooting capabilities in high-security, highly-regulated enterprise environments.Documentation & Stakeholder Management: Ability to draft clear procedures, build test plans, and coordinate with application owners for IAM onboarding.KEY RESPONSIBILITIESEngineering and Deployment: Support the deployment and configuration of enterprise IAM architectures (Entra ID, Hybrid Active Directory, PAM integration)Secure App Onboarding: Drive application integration with SSO and Provisioning services, validating API permissions, and preventing credential/access driftVulnerability Mitigation: Help analyze, implement, and run detection mechanisms or configuration playbooks to remediate accepted risks and legacy protocolsOperational

About the company

Troubleshooting: Identify, isolate, and resolve access issues across cloud identity providers, hybrid connectors, and directory replication boundaries.Collaboration & Governance: Work under the guidance of the Lead Identity Architect to implement strict controls around trust boundaries, cloud tenant configurations, and privileged accounts.Being YouThe “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging - being a valued, respected, trusted member of the team - is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.What You Can ExpectYour career with us isn’t just a job-it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health-because we know that when you feel your best, you do your best.From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute-you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities-from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.We want you to thrive here-and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.Get Referred!If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact’s Kyndryl email address. #J-*****-Ljbffr

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:30 min

Operating developer-friendly identity infrastructure using Affinity Elements

Adam Larter Adam Larter ¡ World Congress 2024

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo ¡ LIVE

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz ¡ World Congress 2026 Europe

2:52 min

Implementing IAM with Keycloak and OpenID Connect

Thomas SßdbrÜcker ¡ LIVE

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter ¡ World Congress 2024

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz ¡ World Congress 2026 Europe

Videos

See all

Related articles

See all