Cloud DB Security Architect — RBAC/ABAC & Migrations

Cognizant; Dallas (TX); Remote; USD 125,000 - 135,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

401(k) plan and contributions

Paid holidays and PTO

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Cloud Architect for DACT to design and implement cloud-native access controls across AWS databases, including Aurora PostgreSQL and Sybase/DB2 migrations. You will build RBAC and ABAC models, integrate IAM and SSO, and enforce security policies.

The role requires shaping architecture for secure database deployments, governance, and automation while collaborating with security, cloud, and application teams to meet regulatory requirements.

Qualifications

• Experience designing cloud-native DB access controls (DACT) and RBAC/ABAC models.
• Proficiency with Sybase ASE/DB2, Aurora PostgreSQL, and AWS IAM.
• Experience with cloud DB architecture, migration, and governance.
• Ability to implement policies, manage privileges, and ensure regulatory compliance.

Responsibilities

• Design and implement cloud-native DACT frameworks across AWS environments.
• Develop and administer RBAC and ABAC models for databases.
• Configure and manage database security controls: roles, privileges, schemas, grants, row-level security.
• Integrate AWS IAM, SSO, and federated authentication with database authorization frameworks.
• Collaborate with security and cloud teams to establish enterprise database security standards.
• Produce technical documentation, runbooks, and security procedures.

Skills

Sybase ASE/DB2

Aurora PostgreSQL

AWS IAM

Cloud DB Architecture

RBAC ABAC

Job description

Cognizant is seeking a Cloud Architect for DACT to design and implement cloud-native access controls across AWS databases, including Aurora PostgreSQL and Sybase/DB2 migrations. You will build RBAC and ABAC models, integrate IAM and SSO, and enforce security policies.

The role requires shaping architecture for secure database deployments, governance, and automation while collaborating with security, cloud, and application teams to meet regulatory requirements.