Senior AI Security Architect

Cognizant; Olympia (WA); On-site; USD 160,000 - 185,000; Full time

Benefits offered by this job

Medical Insurance

Paid Holidays

401(k) Plan

Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a senior security architect to own Agentic AI security architecture and data security strategy across Azure and AWS. You will design secure AI platforms and govern data flows through AI workloads, ensuring robust security controls from the design stage.

Ideal candidates bring deep Azure/M365 security expertise, experience securing AI platforms, and a strong track record in multi-cloud security and data governance in regulated environments. Visa sponsorship is not offered.

Qualifications

• Deep expertise in Azure and Microsoft 365 security architecture, including Microsoft Sentinel, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Proven experience designing and securing Agentic AI and Generative AI platforms in enterprise environments.
• Hands-on experience securing multi-cloud environments across Azure and AWS, including AWS Bedrock Agents, Lambda, and IAM.
• Strong expertise in Microsoft Purview, including DSPM for AI, sensitivity labeling, data flow mapping, information protection, and ML-based auto-classification.
• Strong understanding of AI security, API security, agent-to-agent, agent-to-API, and agent-to-data access patterns.
• Familiarity with Microsoft Copilot Studio and enterprise AI agent platforms.
• Experience implementing Zero Trust principles, identity security controls, and secure‑by‑design architectures.
• Proven track record of designing enterprise‑scale security solutions within regulated environments.
• Strong knowledge of data governance, data protection, privacy and compliance requirements for AI‑enabled solutions.
• Excellent stakeholder management skills with the ability to partner effectively with Identity, AppSec, Engineering, and GRC teams.

Responsibilities

• Define, develop, and own the Agentic AI Reference Security Architecture, including Platform 1.0 security hardening and future roadmap enhancements.
• Implement, operationalize, and manage Microsoft Purview DSPM for AI, leveraging Microsoft FastTrack services where appropriate.
• Establish and maintain enterprise sensitivity labeling and machine learning-based auto-classification standards for AI-related data.
• Map, monitor, and govern data flows into and out of AI agents and AI-enabled workloads.
• Define security architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure Agentic AI solutions across a multi-cloud environment, including Azure and AWS, ensuring consistent security controls regardless of deployment location.
• Collaborate closely with Identity, Application Security (AppSec), and Governance, Risk, and Compliance (GRC) teams to ensure the security controls are embedded into solutions from the design stage.

Skills

Azure security

Microsoft 365 security

Agentic AI security

Generative AI security

Multi-cloud security

AWS Bedrock

IAM

DSPM (Purview)

Zero Trust

Data governance

Compliance

Stakeholder management

Job description

Practice – CIS – Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

This role is responsible for end-to-end security architecture for an enterprise Agentic AI platform and lead the data security strategy for AI. This senior role combines two critical responsibilities: Agentic AI Security Architecture and Data Security Posture Management (DSPM). The successful candidate will be accountable for designing a secure AI platform while protecting and governing the data that flows through AI agents and services.

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

In this role, you will:

• Define, develop, and own the Agentic AI Reference Security Architecture, including Platform 1.0 security hardening and future roadmap enhancements.
• Implement, operationalize, and manage Microsoft Purview DSPM for AI, leveraging Microsoft FastTrack services where appropriate.
• Establish and maintain enterprise sensitivity labeling and machine learning-based auto-classification standards for AI-related data.
• Map, monitor, and govern data flows into and out of AI agents and AI-enabled workloads.
• Define security architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure Agentic AI solutions across a multi-cloud environment, including Azure and AWS, ensuring consistent security controls regardless of deployment location.
• Collaborate closely with Identity, Application Security (AppSec), and Governance, Risk, and Compliance (GRC) teams to ensure the security controls are embedded into solutions from the design stage.

What you need to have to be considered

• Deep expertise in Azure and Microsoft 365 security architecture, including Microsoft Sentinel, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Proven experience designing and securing Agentic AI and Generative AI platforms in enterprise environments.
• Hands-on experience securing multi-cloud environments across Azure and AWS, including AWS Bedrock Agents, Lambda, and IAM.
• Strong expertise in Microsoft Purview, including DSPM for AI, sensitivity labeling, data flow mapping, information protection, and ML-based auto-classification.
• Strong understanding of AI security, API security, agent-to-agent, agent-to-API, and agent-to-data access patterns.
• Familiarity with Microsoft Copilot Studio and enterprise AI agent platforms.
• Experience implementing Zero Trust principles, identity security controls, and secure‑by‑design architectures.
• Proven track record of designing enterprise‑scale security solutions within regulated environments.
• Strong knowledge of data governance, data protection, privacy and compliance requirements for AI‑enabled solutions.
• Excellent stakeholder management skills with the ability to partner effectively with Identity, AppSec, Engineering, and GRC teams.

Preferred Qualifications

• Experience within life sciences, healthcare, medical devices, pharmaceutical, or other regulated industries.
• Relevant certifications such as CISSP, SC-100, AZ-500, CCSP, or equivalent security certifications.
• Experience leading enterprise AI security, cloud security, or data protection initiatives at scale.

Applications will be accepted until 16 Aug 2026.

Salary and Other Compensation:

The annual salary for this position is between $[160,000 – 185,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.