Identity & Access Management (IAM) Consultant

Partially Remote Madrid, Spain Full time R-65581 Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a adaptable, supportive environment where your well-being is prioritized and your potential can thrive. The Role The Identity & Access Management (IAM) Consultant will support the engineering, implementation, and hardening of enterprise identity security solutions. The role involves hands-on deployment and advisory across hybrid environments, collaborating closely with security, infrastructure, and application teams to enhance authentication, authorization, and posture management (SSPM). Who You Are MIN. REQUIRED EXPERIENCE + 5+ years in Cybersecurity Services, with a focus on Identity and Access Management (IAM). EDUCATION AND CERTIFICATION Bachelor's or master's degree in computer science, Information Security, Engineering, or equivalent experience. Highly desired certifications: SC-300 Identity & Access Administrator SC-100 Cybersecurity Architect AZ-500 Microsoft Azure Security Technologies Experience with Tier PAM platforms LANGUAGES Spanish and English (B2 level or higher). CORE REQUIRED COMPETENCIES Identity Lifecycle & Directory Services:

Experience in lifecycle management and active hardening of hybrid directory services (Active Directory and Entra ID) Modern AuthN & AuthZ:





Deep understanding of modern authentication protocols (OIDC, OAuth 2.0, SAML) and a strong focus on migration away from legacy, unsecure authentication mechanisms Zero Trust Policy Design:

Experience configuring Conditional Access, managed device controls, and passwordless authentication models Privileged Access & Secrets Management:

Practical experience with PAM platforms (e.g., CyberArk, Entra ID PIM) and the secure lifecycle management of application secrets Post-Exploitation & Hardening:

Knowledge of Active Directory security posture auditing (e.g., utilizing CIS benchmarks or SSPM/identity security scanning tools) Analytical Thinking:

Proven troubleshooting capabilities in high-security, highly-regulated enterprise environments. Documentation & Stakeholder Management:

Ability to draft clear procedures, build test plans, and coordinate with application owners for IAM onboarding. KEY RESPONSIBILITIES Engineering and Deployment:

Support the deployment and configuration of enterprise IAM architectures (Entra ID, Hybrid Active Directory, PAM integration) Secure App Onboarding:

Drive application integration with SSO and Provisioning services, validating API permissions, and preventing credential/access drift Vulnerability Mitigation:

Help analyze, implement, and run detection mechanisms or configuration playbooks to remediate accepted risks and legacy protocols Operational Troubleshooting:

Identify, isolate, and resolve access issues across cloud identity providers, hybrid connectors, and directory replication boundaries. Collaboration & Governance:

Work under the guidance of the Lead Identity Architect to implement strict controls around trust boundaries, cloud tenant configurations, and privileged accounts. Being You The

#J-18808-Ljbffr

📌 Sr Engineer Iam (Madrid)
🏢 Ntt Data Europe & Latam
📍 Madrid