Senior AI Security Architect

Cognizant; Annapolis (MD); On-site; USD 160,000 - 185,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is hiring a Senior Security Architect for Agentic AI to design a secure AI platform and govern data flows across multi-cloud environments, with a focus on Azure and AWS. You will own the reference security architecture and drive DSPM for AI.

You will collaborate with Identity, AppSec, and GRC teams, implement Zero Trust, and ensure security controls from design through deployment, while addressing data governance, privacy, and compliance in regulated environments.

Qualifications

• Deep expertise in Azure and Microsoft 365 security architecture, including Microsoft Sentinel, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Proven experience designing and securing Agentic AI and Generative AI platforms in enterprise environments.
• Hands-on experience securing multi-cloud environments across Azure and AWS, including AWS Bedrock Agents, Lambda, and IAM.
• Strong expertise in Microsoft Purview, including DSPM for AI, sensitivity labeling, data flow mapping, information protection, and ML-based auto-classification.
• Strong understanding of AI security, API security, agent-to-agent, agent-to-API, and agent-to-data access patterns.
• Familiarity with Microsoft Copilot Studio and enterprise AI agent platforms.
• Experience implementing Zero Trust principles, identity security controls, and secure-by-design architectures.
• Proven track record of designing enterprise-scale security solutions within regulated environments.
• Strong knowledge of data governance, data protection, privacy, and compliance requirements for AI-enabled solutions.
• Excellent stakeholder management skills with the ability to partner effectively with Identity, AppSec, Engineering, and GRC teams.

Responsibilities

• Define, develop, and own the Agentic AI Reference Security Architecture, including Platform 1.0 security hardening and future roadmap enhancements.
• Implement, operationalize, and manage Microsoft Purview DSPM for AI, leveraging Microsoft FastTrack services where appropriate.
• Establish and maintain enterprise sensitivity labeling and machine learning-based auto-classification standards for AI-related data.
• Map, monitor, and govern data flows into and out of AI agents and AI-enabled workloads.
• Define security architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure Agentic AI solutions across a multi-cloud environment, including Azure and AWS, ensuring consistent security controls regardless of deployment location.
• Collaborate closely with Identity, Application Security (AppSec), and Governance, Risk, and Compliance (GRC) teams to ensure security controls are embedded into solutions from the design stage.

Skills

Azure security

Microsoft 365 security

Zero Trust

AI security

Tools

Microsoft Purview

Azure Sentinel

Entra ID

AWS Bedrock

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

This role is responsible for end-to-end security architecture for an enterprise Agentic AI platform and lead the data security strategy for AI. This senior role combines two critical responsibilities: Agentic AI Security Architecture and Data Security Posture Management (DSPM). The successful candidate will be accountable for designing a secure AI platform while protecting and governing the data that flows through AI agents and services.

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

In this role, you will:

• Define, develop, and own the Agentic AI Reference Security Architecture, including Platform 1.0 security hardening and future roadmap enhancements.
• Implement, operationalize, and manage Microsoft Purview DSPM for AI, leveraging Microsoft FastTrack services where appropriate.
• Establish and maintain enterprise sensitivity labeling and machine learning-based auto-classification standards for AI-related data.
• Map, monitor, and govern data flows into and out of AI agents and AI-enabled workloads.
• Define security architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure Agentic AI solutions across a multi-cloud environment, including Azure and AWS, ensuring consistent security controls regardless of deployment location.
• Collaborate closely with Identity, Application Security (AppSec), and Governance, Risk, and Compliance (GRC) teams to ensure security controls are embedded into solutions from the design stage.

What you need to have to be considered

• Deep expertise in Azure and Microsoft 365 security architecture, including Microsoft Sentinel, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Proven experience designing and securing Agentic AI and Generative AI platforms in enterprise environments.
• Hands-on experience securing multi-cloud environments across Azure and AWS, including AWS Bedrock Agents, Lambda, and IAM.
• Strong expertise in Microsoft Purview, including DSPM for AI, sensitivity labeling, data flow mapping, information protection, and ML-based auto-classification.
• Strong understanding of AI security, API security, agent-to-agent, agent-to-API, and agent-to-data access patterns.
• Familiarity with Microsoft Copilot Studio and enterprise AI agent platforms.
• Experience implementing Zero Trust principles, identity security controls, and secure-by-design architectures.
• Proven track record of designing enterprise-scale security solutions within regulated environments.
• Strong knowledge of data governance, data protection, privacy, and compliance requirements for AI-enabled solutions.
• Excellent stakeholder management skills with the ability to partner effectively with Identity, AppSec, Engineering, and GRC teams.

Preferred Qualifications

• Experience within life sciences, healthcare, medical devices, pharmaceutical, or other regulated industries.
• Relevant certifications such as CISSP, SC-100, AZ-500, CCSP, or equivalent security certifications.
• Experience leading enterprise AI security, cloud security, or data protection initiatives at scale.

#LI-EF1

#CB

#Ind123

Applications will be accepted until 16 Aug 2026.

Salary and Other Compensation:

The annual salary for this position is between $[160,000 - 185,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.