Sr Engineer Iam

Identity & Access Management (IAM) Consultant Partially Remote Madrid, Spain Full time R-*** Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge.For our people-Kyndryls-that means doing purposeful work that powers human progress.Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.The Role The Identity & Access Management (IAM) Consultant will support the engineering, implementation, and hardening of enterprise identity security solutions.The role involves hands-on deployment and advisory across hybrid environments, collaborating closely with security, infrastructure, and application teams to enhance authentication, authorization, and posture management (SSPM).Who You Are MIN.REQUIRED EXPERIENCE + 5+ years in Cybersecurity Services, with a focus on Identity and Access Management (IAM).EDUCATION AND CERTIFICATION Bachelor’s or master’s degree in computer science, Information Security, Engineering, or equivalent experience.Highly desired certifications: SC-300 Identity & Access Administrator SC-100 Cybersecurity Architect AZ-500 Microsoft Azure Security Technologies Experience with Tier PAM platforms LANGUAGES Spanish and English (B2 level or higher).CORE REQUIRED COMPETENCIES Identity Lifecycle & Directory Services: Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID) Modern AuthN & AuthZ: Deep understanding of modern authentication protocols (OIDC, OAuth 2.0, SAML) and a strong focus on migration away from legacy, unsecure authentication mechanisms Zero Trust Policy Design: Experience configuring Conditional Access, managed device controls, and passwordless authentication models Privileged Access & Secrets Management: Practical experience with PAM platforms (e.g., CyberArk, Entra ID PIM) and the secure lifecycle management of application secrets Post-Exploitation & Hardening: Knowledge of Active Directory security posture auditing (e.g., utilizing CIS benchmarks or SSPM/identity security scanning tools) Analytical Thinking: Proven troubleshooting capabilities in high-security, highly-regulated enterprise environments.Documentation & Stakeholder Management: Ability to draft clear procedures, build test plans, and coordinate with application owners for IAM onboarding.KEY RESPONSIBILITIES Engineering and Deployment: Support the deployment and configuration of enterprise IAM architectures (Entra ID, Hybrid Active Directory, PAM integration) Secure App Onboarding: Drive application integration with SSO and Provisioning services, validating API permissions, and preventing credential/access drift Vulnerability Mitigation: Help analyze, implement, and run detection mechanisms or configuration playbooks to remediate accepted risks and legacy protocols Operational Troubleshooting: Identify, isolate, and resolve access issues across cloud identity providers, hybrid connectors, and directory replication boundaries.Collaboration & Governance: Work under the guidance of the Lead Identity Architect to implement strict controls around trust boundaries, cloud tenant configurations, and privileged accounts.Being You The #J-***-Ljbffr

REQUIRED EXPERIENCE + 5+ years in Cybersecurity Services, with a focus on Identity and Access Management (IAM). EDUCATION AND CERTIFICATION Bachelor’s or master’s degree in computer science, Information Security, Engineering, or equivalent experience. Highly desired certifications: SC-300 Identity & Access Administrator SC-100 Cybersecurity Architect AZ-500 Microsoft Azure Security Technologies Experience with Tier PAM platforms LANGUAGES Spanish and English (B2 level or higher). CORE REQUIRED COMPETENCIES Identity Lifecycle & Directory Services: Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID) Modern AuthN & AuthZ: Deep understanding of modern authentication protocols (OIDC, OAuth 2.0, SAML) and a strong focus on migration away from legacy, unsecure authentication mechanisms Zero Trust Policy Design: Experience configuring Conditional Access, managed device controls, and passwordless authentication models Privileged Access & Secrets Management: Practical experience with PAM platforms (e.g., CyberArk, Entra ID PIM) and the secure lifecycle management of application secrets Post-Exploitation & Hardening: Knowledge of Active Directory security posture auditing (e.g., utilizing CIS benchmarks or SSPM/identity security scanning tools) Analytical Thinking: Proven troubleshooting capabilities in high-security, highly-regulated enterprise environments. Documentation & Stakeholder Management: Ability to draft clear procedures, build test plans, and coordinate with application owners for IAM onboarding.

Identity & Access Management (IAM) Consultant Partially Remote Madrid, Spain Full time R-***** Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress.