About the Role
Kyndryl is seeking a passionate and driven IT/Cloud Consultant to join our team and break out of the hierarchy to rewrite the rules for what comes next. This is a ground-floor opportunity to make your mark with a brand-new platform with unstoppable growth potential.
Responsibilities
- Own the target architecture for the enterprise Policy‑as‑Code platform, including OPA Control Plane (OCP) / Enterprise OPA (EOPA) Policy lifecycle management, versioning, distribution, and auditability, and CI/CD and Terraform Cloud Run Task integrations.
- Define and govern architecture standards, patterns, and principles for PaC on Google Cloud Platform.
- Lead architectural decision‑making and maintain Architecture Decision Records (ADRs) with full traceability.
- Ensure designs are scalable, modular, cloud‑agnostic, and aligned with enterprise governance constraints.
- Design and implement the PaC governance model, including policy ownership and domain boundaries, contribution, review, approval, and escalation workflows, enforcement modes, and promotion lifecycle.
- Ensure alignment with financial services regulatory requirements and internal controls.
- Support architecture and security governance forums, including preparation of required artefacts.
- Architect a modular PaC framework, including reusable Rego libraries and shared data contracts, cloud abstraction layers, and standardized repository and bundle structures.
- Define policy authoring, testing, enforcement, and release pipelines, including Rego unit and regression testing, CI/CD‑integrated validation and enforcement, and Terraform Cloud Run Task governance.
- Ensure policy enforcement is deterministic, auditable, and production‑faithful.
- Architect CI/CD and automation patterns using GitHub Actions, including reusable workflows and onboarding automation.
- Define integration approaches for Terraform Cloud, Kubernetes admission control, centralized decision logging and observability, and external enterprise systems via secure data‑bridge patterns.
- Ensure strong separation between policy logic and enterprise system integrations.
- Define migration strategies to transition legacy Terraform Cloud / OPA policies into the new PaC framework with functional equivalence.
- Oversee controlled rollouts and enforcement promotion strategies to minimize operational risk.
- Lead knowledge transfer, documentation strategy, and operational readiness to enable client teams to independently operate the platform.
- Provide technical leadership to platform engineers, policy engineers, and DevSecOps specialists.
- Act as the primary technical escalation point for complex design or enforcement issues.
- Translate business and compliance requirements into clear, actionable technical designs.
- Foster strong collaboration between architecture, security, platform, and delivery teams.
Requirements
- 5+ years of experience with Open Policy Agent (OPA) and Rego
- Hands‑on knowledge of Enterprise OPA (EOPA) capabilities (impact analysis, decision logging, bundle lifecycle)
- 5+ years of experience with Terraform and Terraform Cloud
- Terraform Cloud Run Tasks (design, enforcement, governance)
- 5+ years of experience with GitHub Actions (advanced workflows, reusable workflows, automation patterns)
- Pipeline‑integrated validation and policy enforcement
- 5+ years of experience with GCP in regulated environments
- Kubernetes policy enforcement (OPA Gatekeeper)
- 5+ years of experience policy decision logging, ingestion, analytics, and reporting
- 5+ years of experience Designing immutable, auditor‑friendly evidence pipelines
- Proven experience leading enterprise architecture designs in regulated industries
- Strong understanding of governance models, segregation of duties, and audit and compliance requirements
- Experience producing architecture artefacts: C4 diagrams, data flows, process flows, ADRs and architecture review submissions
- Experience delivering cloud platforms for financial services or regulated enterprises
- Familiarity with banking security posture expectations, compliance‑driven SDLC controls, and risk and control validation processes
- Strong technical leadership and mentoring capabilities
- Ability to influence without authority across multiple stakeholder groups
- Excellent written and verbal communication skills
- Comfortable engaging architecture boards, security teams, and executive stakeholders
- Experience with Terratest and infrastructure‑level policy validation
- Experience with release automation and promotion pipelines
- Experience with decision replay and regression analysis
- Background in DevSecOps or platform engineering at scale
- Experience designing policy frameworks used by multiple lines of business
Skills
- Open Policy Agent (OPA)
- Rego
- Enterprise OPA (EOPA)
- Terraform
- Terraform Cloud
- Terraform Cloud Run Tasks
- GitHub Actions
- GCP
- Kubernetes
- OPA Gatekeeper
- Policy Decision Logging
- Terratest
- DevSecOps
- Platform Engineering
Location
- Remote
Work Type
- Hybrid
Experience Level
- 5+ years
Benefits
- Flexible, supportive environment where well-being is prioritized
- Investment in learning, training, and career growth
- Be Well programs supporting financial, mental, physical, and social health
- Access to cutting-edge learning opportunities
About the Company
- At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.
- We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge.
- For our people—Kyndryls—that means doing purposeful work that powers human progress.
- We achieve progress the world depends on, with purpose.
- We are committed to sustainable progress for our customers and supporting the communities where we work and live.
Equal Opportunity
- We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences.
- Even if you don’t meet every requirement, we encourage you to apply.
- Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success.
- That’s The Kyndryl Way.
