Cloud Architect -Database Access Control Toolkit

Cognizant; Springfield (IL); Remote; USD 125,000 - 135,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Cloud Architect specialized in DACT to design and implement cloud-native database access controls across Aurora PostgreSQL and other platforms. You will build RBAC and ABAC models, integrate AWS IAM and federation, and ensure secure, scalable database architectures for AWS environments.

The role emphasizes compliance, migration support, and automation for provisioning and reporting, with a remote-friendly setup across the USA.

Qualifications

• Expertise in Sybase ASE/DB2, Aurora PostgreSQL, and AWS IAM/security.
• Experience with cloud DB architectures and migrations.
• Strong RBAC/ABAC authorization modeling skills.

Responsibilities

• Design and implement cloud-native Database Access Control frameworks.
• Develop and govern RBAC and ABAC models across database platforms.
• Integrate IAM, SSO, and federated auth with database authorization frameworks.
• Create secure database architectures for AWS environments.
• Produce technical docs, runbooks, and security procedures.

Skills

Sybase ASE/DB2

Aurora PostgreSQL

AWS Security & Identity Management

Cloud Database Architecture

RBAC & ABAC

Job description

Role: Cloud Architect -DACT

Location: Remote (Anywhere in USA)

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

Job Description:

• DACT (Database Access Control Toolkit) is a regulatory-required and TR-mandated control that currently only works for Aurora and DynamoDB. Designing and implementing cloud-native database access controls, extending existing DACT coverage where feasible and building replacement capabilities where required. Removing the top blocker for Sybase ASE/DB2 to Aurora PostgreSQL database migration
• Design and implement cloud-native Database Access Control (DACT) frameworks.
• Develop and administer Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Configure and manage database security controls, including roles, privileges, schemas, grants, and row-level security.
• Implement and govern database access policies across multiple database platforms.
• Integrate AWS IAM, SSO, and federated authentication mechanisms with database authorization frameworks.
• Design secure database architectures for AWS cloud environments.
• Ensure compliance with enterprise security, governance, audit, and regulatory requirements.
• Support cloud database modernization and migration initiatives.
• Develop automation for database provisioning, security controls, and compliance reporting.
• Collaborate with security, cloud, infrastructure, and application teams to establish enterprise-wide database security standards.
• Produce technical documentation, operational runbooks, and security procedures.

Looking for expert skills in the below areas:

• Sybase ASE/DB2
• Aurora PostgreSQL
• AWS Security & Identity Management
• Cloud Database Architecture & Migration
• RBAC & ABAC Authorization Models

Salary and Other Compensation:

The annual salary for this position is between $125,000 to $135,000 yearly depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.