Security Engineer (Modernization & Hybrid Cloud)

About the role

Kyndryl is seeking a Security Engineer to design and implement security solutions for modernizing legacy systems and migrating workloads to hybrid cloud environments. You will protect confidential data, ensure compliance, and enable secure digital transformation for banking customers.

Key responsibilities

• Define and implement security blueprints for coexistence and migration phases, applying "Security by Design" to Java micro‑services and cloud‑native databases.
• Design secure integration patterns between Mainframe security (RACF/ACF2/Top Secret) and cloud identity providers (Azure AD/Entra ID) following Zero‑Trust principles.
• Lead application security for Java, integrating SAST, DAST and SCA tools into CI/CD pipelines.
• Define encryption, masking and tokenization strategies for DB2 and VSAM data and oversee secure migration to PostgreSQL/SingleStore.
• Harden Azure infrastructure (AKS, Azure SQL, Key Vault, Azure Firewall, NSGs, Private Links) and audit security posture.
• Implement secure API gateways with OAuth2/OIDC and protect against OWASP Top 10 threats.
• Establish SIEM/SOAR logging and monitoring to correlate legacy batch events with modern distributed traces.

Required profile

• 4‑5 years of experience securing hybrid infrastructure, mainframe environments and cloud platforms.
• Customer‑focused mindset with strong collaboration skills across cross‑functional teams.
• Growth mindset and willingness to stay current with emerging threats and technologies.

Required skills

• Mainframe security: RACF, ACF2, Top Secret, COBOL, CICS, DB2, VSAM.
• Secure protocols: AT‑TLS, SSH tunneling, SFTP/FTPS.
• Cloud security: Azure (AKS, Azure SQL, Key Vault, Azure Firewall), PostgreSQL, SingleStore, network hub‑and‑spoke, private endpoints, WAF.
• Application security: Spring Security, JVM hardening, SAST/DAST/SCA tools (Checkmarx, SonarQube, Snyk).
• Cryptography: AES‑256, RSA, ECC, HSM integration, TLS performance tuning.