Cloud Architect -Database Access Control Toolkit

Cognizant; Santa Fe (NM); Remote; USD 125,000 - 135,000; Full time

Job summary

Cognizant is seeking a Cloud Architect for DACT to design and implement cloud-native database access controls across AWS, focusing on Aurora PostgreSQL, Sybase ASE, and DB2 migrations. This remote role can be performed from anywhere in the USA.

You will develop RBAC and ABAC models, integrate AWS IAM and SSO, govern policies, and collaborate with security, cloud, and application teams to meet governance and regulatory requirements.

Qualifications

• Expert in Sybase ASE and DB2 databases.
• Experience with Aurora PostgreSQL in AWS.
• Strong knowledge of IAM, SSO, and federated auth.
• Experience with RBAC and ABAC authorization models.

Responsibilities

• Design and implement cloud-native DACT frameworks.
• Develop RBAC and ABAC models for databases.
• Configure database security controls: roles, privileges, schemas, grants, row-level security.
• Integrate AWS IAM, SSO, and federated authentication with database authorization.
• Design secure database architectures for AWS cloud environments.
• Ensure compliance with security, governance, audit requirements.

Skills

Sybase ASE

DB2

Aurora PostgreSQL

AWS IAM

RBAC

ABAC

Cloud DB Architecture

Migration

AWS Security

Job description

Role: Cloud Architect -DACT

Location: Remote (Anywhere in USA)

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

Job Description:

• DACT (Database Access Control Toolkit) is a regulatory-required and TR-mandated control that currently only works for Aurora and DynamoDB. Designing and implementing cloud-native database access controls, extending existing DACT coverage where feasible and building replacement capabilities where required. Removing the top blocker for Sybase ASE/DB2 to Aurora PostgreSQL database migration
• Design and implement cloud-native Database Access Control (DACT) frameworks.
• Develop and administer Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Configure and manage database security controls, including roles, privileges, schemas, grants, and row-level security.
• Implement and govern database access policies across multiple database platforms.
• Integrate AWS IAM, SSO, and federated authentication mechanisms with database authorization frameworks.
• Design secure database architectures for AWS cloud environments.
• Ensure compliance with enterprise security, governance, audit, and regulatory requirements.
• Support cloud database modernization and migration initiatives.
• Develop automation for database provisioning, security controls, and compliance reporting.
• Collaborate with security, cloud, infrastructure, and application teams to establish enterprise-wide database security standards.
• Produce technical documentation, operational runbooks, and security procedures.

Looking for expert skills in the below areas:

• Sybase ASE/DB2
• Aurora PostgreSQL
• AWS Security & Identity Management
• Cloud Database Architecture & Migration
• RBAC & ABAC Authorization Models

Salary and Other Compensation:

The annual salary for this position is between $125,000 to $135,000 yearly depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.