Infra Specialist- PAM engineer

Cognizant; Silver Spring (MD); On-site; USD 95,000 - 105,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

401(k) plan and contributions

Paid holidays plus Paid Time Off

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant in the United States seeks an Infra Specialist- PAM engineer to architect secure PAM and access management solutions across a multinational environment, aligning with regulatory and business standards. The role focuses on designing hybrid model architectures that protect critical systems and support seamless digital interactions.

The Architect will guide teams, evaluate vendor capabilities, and document decisions to strengthen security posture and reduce risk.

Qualifications

• Extensive hands-on architectural experience designing PAM and access management solutions.
• Strong knowledge of multifactor authentication, SSO, and RBAC concepts.
• Experience with hybrid work models and secure remote access design.
• Familiarity with cards and payments domain processes a plus.

Responsibilities

• Design enterprise-grade architectures for privileged access and access management solutions protecting infrastructure and data while aligning with security standards.
• Develop target state architectures and roadmaps for evolving access controls to support hybrid work models and modern applications.
• Analyze identity and access landscapes to identify gaps and propose remediation strategies.
• Define reference patterns for integrating PAM and Access Management with apps, databases, and operating systems.
• Collaborate with security engineering and operations to ensure designs are implementable and reliable.
• Guide project teams in selecting authentication, authorization, and session management mechanisms balancing security and usability.
• Create architecture decision records and design documentation for diverse stakeholders.
• Evaluate vendor capabilities and recommend options meeting functional and nonfunctional requirements.
• Support incident and risk assessments by providing architectural insights into access pathways and threat exposure.
• Coordinate with compliance and risk teams to meet auditability and regulatory standards.

Skills

Privileged Access Management

Access Management

Security Architecture

Hybrid/Cloud Networks

Tools

IAM platforms

SAML/OAuth/OpenID Connect

Job description

Role: Infra Specialist- PAM engineer

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

Job Summary

This role focuses on architecting secure and scalable access solutions across a multinational environment using Privileged Access Management and Access Management platforms. The Architect will design hybrid model architectures that protect critical systems align with regulatory and business standards and support seamless digital interactions. Experience in cards and payments will help optimize secure transaction flows and reduce risk exposure.

Responsibilities

• · Design enterprise grade architectures for privileged access and access management solutions that protect critical infrastructure and sensitive data while aligning with organizational security standards and industry regulations.
• · Develop detailed target state architectures and roadmaps for evolving access controls to support hybrid work models and modern application landscapes while maintaining strong security posture.
• · Analyze existing identity and access landscapes to identify gaps in privileged account protection and access management workflows and propose practical remediation strategies.
• · Define reference patterns and reusable security design components for integrating Privileged Access Management and Access Management with applications databases and operating systems in complex environments.
• · Collaborate with security engineering and operations teams to ensure architecture designs are implementable maintainable and optimized for reliability performance and user experience.
• · Guide project teams in selecting appropriate authentication authorization and session management mechanisms that balance security requirements with business usability needs.
• · Create architecture decision records and design documentation that clearly describe solution components data flows integration points and security controls for diverse stakeholders.
• · Evaluate vendor capabilities and platform features in the privileged access and access management space and recommend solution options that meet functional and nonfunctional requirements.
• · Support incident and risk assessments by providing architectural insights into access pathways threat exposure and potential containment strategies for privileged accounts.
• · Coordinate with compliance and risk teams to ensure that access architectures meet standards for auditability segregation of duties and regulatory alignment for financial services use cases.
• · Optimize architectures to enable scalable onboarding of applications and systems into Privileged Access Management platforms reducing manual effort and improving time to value for the organization.
• · Advise product owners and business stakeholders on how secure access architectures can enhance customer trust streamline operations and reduce fraud in digital channels.
• · Document operational considerations such as monitoring logging and alerting requirements so that access solutions can be effectively supported in day model environments without travel obligations.

Qualifications

• · Demonstrate strong hands on architectural experience designing and implementing Privileged Access Management solutions across large scale enterprise environments with at least nine years of overall experience.
• · Exhibit deep understanding of access management concepts such as multifactor authentication single sign on and role based access control and be able to translate these into practical architecture patterns.
• · Apply practical knowledge of cards and payments domain processes including transaction flows and settlement mechanisms to design access controls that reduce risks in financial operations when such experience is available.
• · Utilize solid background in hybrid work model environments including secure remote access and network segmentation to ensure access architectures support flexible working without compromising security.
• · Bring proficiency in documenting architecture diagrams and narratives using standard modeling approaches so that technical and nontechnical stakeholders can easily understand proposed solutions.
• · Show capability in engaging cross functional teams including application owners infrastructure staff and security analysts to gather requirements and convert them into coherent access management architectures.
• · Leverage familiarity with modern authentication standards and security frameworks to ensure designs remain compatible with evolving technologies and regulatory expectations.

Salary and Other Compensation: The annual salary for this position is between $95,000 to $105,000 yearly depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• · Medical/Dental/Vision/Life Insurance
• · Paid holidays plus Paid Time Off
• · 401(k) plan and contributions
• · Long-term/Short-term Disability
• · Paid Parental Leave
• · Employee Stock Purchase Plan

Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.