IAM Engineer

Cognizant; Chennai District; Hybrid; INR 1,000,000 - 1,500,000; Full time

Job summary

Cognizant Corporate is seeking a Senior Associate to govern and manage the Corporate Active Directory, Entra ID, and PKI services. You will support security posture, access controls, and identity management across SaaS, PaaS, and IaaS in a hybrid model.

You will collaborate with CS, IT Service owners, and Operations teams to ensure high availability, compliance, and timely incident resolution while contributing to the learning culture and growth.

Qualifications

• Knowledge of Microsoft Active Directory and Entra ID.
• Experience with PKI infrastructure and certificate authorities.
• Familiarity with Azure AD, SSO, and MFA configurations.

Responsibilities

• Govern and manage Cognizant Corporate Active Directory environments.
• Design and implement Entra ID and Cloud sync integrations.
• Maintain AD health, security patches, and compliance reporting.
• Develop and enforce domain security policies and access controls.
• Provide 24/7 operational support for Directory Services and PKI.

Skills

Active Directory governance

Entra ID

PKI

Azure MFA

Conditional Access

Identity governance

Hybrid AD design

Tools

Entra ID Connect

Cloudsync

Azure AD Connect

PKI tooling

Ping/Okta (IDP)

Job description

About Cognizant Corporate

Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.

At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose – always guided by our core values. Join us in shaping future of business.

About The Role

As a Senior Associate you will drive impactful contributions and focus on outcomes. You will be a key member of the Corporate Security - IAM – Directory Services Team, collaborating with CS, IT Service owners and Operations Teams. In this position you are responsible to govern and manage the Cognizant Corporate Active Directory, Entra ID, Entra ID Connect, Certificate Authority Services and its security compliance posture. As a team of self-starters, you can work with impact with our vibrant people and culture all while enjoying unmatched learning opportunities.

In This Role, You Will

• Strong knowledge and hands‑on experience managing large‑scale Active Directory infrastructures.
• Hands‑on experience with Entra ID, Entra ID‑managed domain services, and PKI infrastructure.
• Strong design and implementation expertise in On‑premises Active Directory Domain Services integrated with Microsoft Entra ID.
• Hands‑on experience designing and implementing Entra ID Connect synchronization between On‑premises AD and Entra ID.
• Strong knowledge of Azure SSO integration and Azure App Registration (SAML / OIDC).
• Hands‑on experience with Microsoft Entra MFA, SSPR, and Conditional Access policies.
• Experience designing and implementing Conditional Access policies aligned with enterprise security requirements.
• Hands‑on experience implementing Azure MFA and Passwordless authentication solutions.
• Strong experience with Entra ID Privileged Identity Management.
• Knowledge of dynamic and self‑service group membership, automatic license assignment, and access reviews.
• Hands‑on experience in identity management for applications across SaaS, PaaS, and IaaS environments in Microsoft cloud.
• Hands‑on experience designing and deploying multi‑forest, multi‑domain AD environments with hybrid integrations.
• Responsible for ensuring a healthy AD environment with effective compliance, reporting, monitoring, and performance management.
• Knowledge of implementing high‑availability and disaster‑recovery solutions for Active Directory and PKI.
• Strong knowledge of AD and PKI disaster recovery activities.
• Experience managing LAPS deployments.
• Serve as a member of the Windows Active Directory Domain Administrator Support Team, providing timely operational support; performing daily operations; and applying security patches, fixes, and antivirus updates as required.
• Develop and enforce domain‑level security policies, including authentication mechanisms, password policies, and silo policy rules.
• Create and maintain technical documentation and operational procedures as needed.
• Handle requests, incidents, problems, and escalations related to Directory Services and PKI infrastructure.
• Accountable for complete service management and meeting defined SLAs.
• Hands‑on experience with change management, incident management, and problem management processes.
• Embrace our vibrant culture by striving for excellence, focusing on meaningful outcomes, and collaborating effectively. Take ownership, build relationships, and focus on personal growth to drive business strategy and foster an inclusive culture, creating unmatched career opportunities and impactful work.

What You Must Have To Be Considered

• Strong knowledge and experience in governing and managing of following Services:
  • Microsoft Active Directory
  • Microsoft Entra ID
  • Microsoft Certificate Authority
  • Microsoft Entra ID Connect & Cloudsync
• A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
• The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The right Thing, & Own It

These will help you succeed

• Industry‑recognised security or identity certifications (Microsoft, ISC², ISACA, CompTIA, or equivalent) are strongly preferred.
• Strong knowledge of security threats, attack vectors, vulnerabilities, and mitigation strategies relevant to directory services, identity platforms, and authentication systems.
• Experience implementing Zero Trust identity controls, least‑privilege access, and strong authentication mechanisms.
• Knowledge of risk assessment, audit readiness, compliance frameworks, and regulatory requirements related to identity and directory services.
• Exposure to additional identity, directory, security, or cloud platforms beyond Microsoft, with the ability to apply identity and security concepts in a tool‑agnostic manner across heterogeneous enterprise environments.
• Add‑on experience with identity management tools is preferred.
• Good to have Ping / Okta or any IDP knowledge.

Work model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 3 days a week in a client or Cognizant office in India. Regardless of your working arrangement, we are here to support a healthy work‑life balance though our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

We're excited to meet people who share our mission and can make an impact in a variety of ways.