Identity & Access Management (IAM) Consultant

Partially Remote

Madrid, Spain

Full time

R-65581

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a versátil, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

The Identity & Access Management (IAM) Consultant will support the engineering, implementation, and hardening of enterprise identity security solutions. The role involves hands-on deployment and advisory across hybrid environments, collaborating closely with security, infrastructure, and application teams to enhance authentication, authorization, and posture management (SSPM).

Who You Are

MIN. REQUIRED EXPERIENCE

- + 5+ years in Cybersecurity Services, with a focus on Identity and Access Management (IAM).

EDUCATION AND CERTIFICATION

Bachelor's or master's degree in computer science, Information Security, Engineering, or equivalent experience.

Highly desired certifications:

- SC-300 Identity & Access Administrator
- SC-100 Cybersecurity Architect
- AZ-500 Microsoft Azure Security Technologies
- Experience with Tier PAM platforms

LANGUAGES

Spanish and English (B2 level or higher).

CORE REQUIRED COMPETENCIES

- Identity Lifecycle & Directory Services: Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID)
- Modern AuthN & AuthZ:



Deep understanding of modern authentication protocols (OIDC, OAuth 2.0, SAML) and a strong focus on migration away from legacy, unsecure authentication mechanisms
- Zero Trust Policy Design: Experience configuring Conditional Access, managed device controls, and passwordless authentication models
- Privileged Access & Secrets Management: Practical experience with PAM platforms (e.g., CyberArk, Entra ID PIM) and the secure lifecycle management of application secrets
- Post-Exploitation & Hardening: Knowledge of Active Directory security posture auditing (e.g., utilizing CIS benchmarks or SSPM/identity security scanning tools)
- Analytical Thinking: Proven troubleshooting capabilities in high-security, highly-regulated enterprise environments.
- Documentation & Stakeholder Management: Ability to draft clear procedures, build test plans, and coordinate with application owners for IAM onboarding.

KEY RESPONSIBILITIES

- Engineering and Deployment: Support the deployment and configuration of enterprise IAM architectures (Entra ID, Hybrid Active Directory, PAM integration)
- Secure App Onboarding: Drive application integration with SSO and Provisioning services, validating API permissions, and preventing credential/access drift
- Vulnerability Mitigation: Help analyze, implement, and run detection mechanisms or configuration playbooks to remediate accepted risks and legacy protocols
- Operational Troubleshooting: Identify, isolate, and resolve access issues across cloud identity providers, hybrid connectors, and directory replication boundaries.
- Collaboration & Governance: Work under the guidance of the Lead Identity Architect to implement strict controls around trust boundaries, cloud tenant configurations, and privileged accounts.

Being You

The

#J-18808-Ljbffr

📌 Sr Engineer Iam (Ávila)
🏢 Ntt Data Europe & Latam
📍 Ávila