a Cloud Security Architect

In This Role, You Will

• Govern the security architecture of enterprise cloud and hybrid environments across Azure, AWS, GCP, and OCI platforms.
• Conduct cloud security architecture reviews covering Identity and Access Management (IAM), Privileged Identity Management (PIM), network segmentation, micro-segmentation, and Zero Trust security models.
• Partner with Cloud Management Office, enterprise architecture, security, and engineering teams to integrate security requirements into cloud design and architecture decisions.
• Define and implement cloud security standards, architectural patterns, governance controls, and security guardrails.
• Embed security requirements into Infrastructure as Code (IaC), CI/CD pipelines, and cloud automation frameworks.
• Collaborate with compliance and risk stakeholders to ensure cloud solutions meet regulatory and security requirements.
• Evaluate emerging cloud services, container platforms, serverless technologies, and AI-enabled solutions while providing architectural guidance and security recommendations.
• Serve as the primary security architecture liaison between enterprise architecture, security governance, control validation, IT security, and business stakeholders.
• Define and track key performance indicators (KPIs) and service level objectives (SLOs) for cloud architecture initiatives.
• Lead architecture governance reviews, risk assessments, threat modeling exercises, and solution validation activities.
• Mentor security, architecture, cloud, and engineering teams on secure cloud operations and cloud security best practices.
• Stay current on cloud provider roadmaps, threat landscape developments, regulatory requirements, and industry security standards.

What You Must Have to Be Considered

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 12+ years of experience in information security and cybersecurity architecture.
• 8+ years of experience securing enterprise cloud environments across Azure, AWS, GCP, and/or OCI.
• Proven experience designing and governing cloud security architectures for large-scale enterprise deployments.
• Demonstrated experience leading cloud architecture security reviews and evaluating security controls against cloud frameworks and assurance programs.
• Experience implementing and governing cloud security requirements within DevSecOps environments.
• Strong expertise in cloud security architecture, threat modeling, risk management, and security governance.
• Experience working with enterprise architecture, compliance, risk, audit, and operational stakeholders.
• Experience managing, mentoring, and guiding architecture, engineering, or validation teams.
• Strong communication, stakeholder management, and strategic planning skills.
• A strong sense of ownership, desire to create meaningful outcomes, and passion for improving the security posture of cloud environments.
• The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do the Right Thing, and Own It.

These Will Help You Succeed

• Deep expertise in Microsoft Azure, including Landing Zones, Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, and Microsoft Entra ID.
• Working knowledge of AWS and Google Cloud Platform security services and governance frameworks.
• Experience with container platforms including AKS, EKS, and GKE.
• Knowledge of Kubernetes security, RBAC, network policies, and service mesh technologies.
• Strong cloud networking expertise including VNet/VPC design, hub-and-spoke architectures, ExpressRoute, Direct Connect, firewall controls, and micro-segmentation.
• Expertise in Zero Trust Architecture, IAM, PIM, Cloud Security Posture Management (CSPM), and SIEM/SOAR integrations.
• Experience with security and compliance frameworks including PCI DSS, HIPAA, ISO 27001, NIST CSF 2.0, NIST SP 800-53, and Cyber Essentials Plus.
• Experience using Terraform, Bicep, ARM Templates, CloudFormation, GitOps, and CI/CD security controls.
• Proficiency in PowerShell, Python, Bash, and cloud automation practices.
• Strong analytical and structured problem-solving abilities.
• Proven ability to communicate complex technical concepts to technical and non-technical stakeholders.
• Strong cross-functional collaboration and stakeholder management capabilities.
• Leadership experience coaching and mentoring architects, engineers, and security practitioners