Cloud Security Architect

Cognizant; Chennai District; Hybrid; INR 4,000,000 - 6,000,000; Full time

Job summary

Cognizant is seeking a Cloud Security Architect to lead security design, validation, and governance across enterprise cloud and hybrid environments including Azure, AWS, GCP, and OCI. You will collaborate with senior stakeholders, enterprise architects, and DevSecOps teams to deliver end-to-end security architecture—from threat modeling to implementation validation and operational governance.

You will influence cloud adoption initiatives, modern security architectures, and enterprise-wide cloud

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field.
• 10+ years of information security and cybersecurity architecture experience.
• 8+ years securing enterprise cloud environments (Azure/AWS/GCP/OCI).
• Experience designing and governing cloud security architectures for large-scale deployments.
• Experience leading cloud security reviews and DevSecOps security governance.

Responsibilities

• Govern security architecture across enterprise cloud and hybrid environments (Azure, AWS, GCP, OCI).
• Conduct cloud security reviews covering IAM, PIM, segmentation, Zero Trust.
• Define and implement cloud security standards, patterns, governance, and guardrails.
• Embed security into IaC, CI/CD, and cloud automation frameworks.
• Mentor teams on secure cloud operations and security best practices.
• Stay updated on cloud roadmaps, threat landscape, and regulatory requirements.

Skills

Cloud security

Threat modeling

IAM/PIM

Zero Trust

Governance

Stakeholder management

Security reviews

Education

Bachelor degree in CS/IT/C cybersecurity

Tools

Terraform

CloudFormation

Palo Alto Cortex

Azure Policy

Job description

About Cognizant

Cognizant is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?

About the Role

As a Cloud Security Architect, you will lead the design, validation, and governance of security architecture across enterprise cloud and hybrid environments. You will play a critical role in ensuring cloud-native and hybrid architectures align with Cognizant’s security reference architecture, regulatory obligations, and business objectives across multi-cloud platforms including Microsoft Azure, AWS, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).

You will work independently with senior stakeholders, enterprise architects, security teams, cloud engineering teams, DevSecOps practitioners, and compliance leaders to provide end-to-end ownership of cloud security architecture from threat modeling and design reviews through implementation validation and operational governance. You will have the opportunity to influence strategic cloud adoption initiatives, modern security architectures, and enterprise-wide cloud governance programs while mentoring teams and driving security excellence.

In This Role, You Will

• Govern the security architecture of enterprise cloud and hybrid environments across Azure, AWS, GCP, and OCI platforms.
• Conduct cloud security architecture reviews covering Identity and Access Management (IAM), Privileged Identity Management (PIM), network segmentation, micro-segmentation, and Zero Trust security models.
• Partner with Cloud Management Office, enterprise architecture, security, and engineering teams to integrate security requirements into cloud design and architecture decisions.
• Define and implement cloud security standards, architectural patterns, governance controls, and security guardrails.
• Embed security requirements into Infrastructure as Code (IaC), CI/CD pipelines, and cloud automation frameworks.
• Collaborate with compliance and risk stakeholders to ensure cloud solutions meet regulatory and security requirements.
• Evaluate emerging cloud services, container platforms, serverless technologies, and AI-enabled solutions while providing architectural guidance and security recommendations.
• Serve as the primary security architecture liaison between enterprise architecture, security governance, control validation, IT security, and business stakeholders.
• Define and track key performance indicators (KPIs) and service level objectives (SLOs) for cloud architecture initiatives.
• Lead architecture governance reviews, risk assessments, threat modeling exercises, and solution validation activities.
• Mentor security, architecture, cloud, and engineering teams on secure cloud operations and cloud security best practices.
• Stay current on cloud provider roadmaps, threat landscape developments, regulatory requirements, and industry security standards.

What You Must Have to Be Considered

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 10+ years of experience in information security and cybersecurity architecture.
• 8+ years of experience securing enterprise cloud environments across Azure, AWS, GCP, and/or OCI.
• Proven experience designing and governing cloud security architectures for large-scale enterprise deployments.
• Demonstrated experience leading cloud architecture security reviews and evaluating security controls against cloud frameworks and assurance programs.
• Experience implementing and governing cloud security requirements within DevSecOps environments.
• Strong expertise in cloud security architecture, threat modeling, risk management, and security governance.
• Experience working with enterprise architecture, compliance, risk, audit, and operational stakeholders.
• Experience managing, mentoring, and guiding architecture, engineering, or validation teams.
• Strong communication, stakeholder management, and strategic planning skills.
• A strong sense of ownership, desire to create meaningful outcomes, and passion for improving the security posture of cloud environments.
• The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do the Right Thing, and Own It.

These Will Help You Succeed

• Deep expertise in Microsoft Azure, including Landing Zones, Azure Policy, Microsoft Defender for Cloud, Palo Alto Cortex, API Security, DSPM, Zscaler and Microsoft Entra ID.
• Working knowledge of AWS and Google Cloud Platform security services and governance frameworks.
• Experience with container platforms including AKS, EKS, and GKE.
• Knowledge of Kubernetes security, RBAC, network policies, and service mesh technologies.
• Strong cloud networking expertise including VNet/VPC design, hub-and-spoke architectures, ExpressRoute, Direct Connect, firewall controls, and micro-segmentation.
• Expertise in Zero Trust Architecture, IAM, PIM, Cloud Security Posture Management (CSPM), and SIEM/SOAR integrations.
• Experience with security and compliance frameworks including PCI DSS, HIPAA, ISO 27001, NIST CSF 2.0, NIST SP 800-53, and Cyber Essentials Plus.
• Experience using Terraform, Bicep, ARM Templates, CloudFormation, GitOps, and CI/CD security controls.
• Proficiency in PowerShell, Python, Bash, and cloud automation practices.
• Strong analytical and structured problem-solving abilities.
• Proven ability to communicate complex technical concepts to technical and non-technical stakeholders.
• Strong cross-functional collaboration and stakeholder management capabilities.
• Leadership experience coaching and mentoring architects, engineers, and security practitioners.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP).
• Certified Cloud Security Professional (CCSP) or Certificate of Cloud Security Knowledge (CCSK).
• Microsoft Azure Security Engineer Associate (AZ-500) or equivalent AWS Certified Security – Specialty or GCP Professional Cloud Security Engineer certification.
• Microsoft Cybersecurity Architect Expert (SC-100).
• Microsoft Identity and Access Administrator Associate (SC-300).
• Azure Solutions Architect Expert (AZ-305) or equivalent AWS or GCP Professional Architect certification.
• Certified Information Systems Auditor (CISA).

Work Model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring attendance at a client or Cognizant office as determined by business needs. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.