Practice - CIS - Cloud, Infrastructure, and Security Services
About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.
Job Summary
We are seeking an experienced IAM Solutions Architect to lead the design, architecture, and modernization of enterprise Identity and Access Management (IAM) solutions. This role will be responsible for defining IAM strategy, driving secure authentication and authorization architectures, and enabling scalable identity services across enterprise, B2B, and B2C environments. The ideal candidate will possess deep expertise in identity governance, access management, federation, privileged access management, and modern authentication technologies. This position requires strong technical leadership, stakeholder engagement, and the ability to deliver secure, enterprise-scale IAM solutions.
*Please note, this role is not able to offer visa transfer or sponsorship now or in the future*
In this role, you will:
· Lead the architecture, design, and implementation of enterprise IAM solutions covering identity governance, authentication, authorization, federation, single sign-on (SSO), and privileged access management.
· Define IAM roadmaps, reference architectures, integration standards, and modernization strategies aligned with business and security objectives.
· Partner with security, infrastructure, application, and engineering teams to design scalable and secure IAM services across enterprise, B2B, and B2C environments.
· Evaluate IAM technologies and provide recommendations for platform enhancements, product selection, and future-state architecture.
· Design and govern integrations leveraging OAuth, OpenID Connect (OIDC), SAML, SCIM, Kerberos, WS-Federation, and related identity protocols.
· Drive architecture reviews, proof-of-concepts, risk assessments, and remediation strategies for IAM-related initiatives.
· Support implementation and optimization of Identity Governance and Administration (IGA), Access Management, Privileged Access Management (PAM), and Directory Services solutions.
· Collaborate with application teams to gather requirements, define integration patterns, and deliver IAM onboarding solutions.
· Develop architecture standards, technical documentation, governance models, and operational best practices.
· Mentor engineering teams and provide technical leadership for enterprise IAM transformation programs.
What you need to have to be considered
· 12+ years of overall IT experience with 9+ years of IAM-focused technical leadership experience.
· 6+ years of experience in IAM architecture, solution design, and enterprise identity transformation initiatives.
· Deep expertise with Identity Management platforms such as SailPoint, CA Identity Manager, or equivalent IGA solutions.
· Strong experience with Access Management technologies such as Okta, SiteMinder, Azure AD, and enterprise SSO platforms.
· Experience with Privileged Access Management solutions such as CyberArk or similar platforms.
· Extensive knowledge of modern identity standards including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, Kerberos, and WS-Federation.
· Strong understanding of Active Directory, Azure Active Directory, enterprise directory architecture, and LDAP services.
· Experience designing secure cloud identity solutions across AWS, Azure, and hybrid enterprise environments.
· Familiarity with application integration technologies, Java/J2EE, .NET, APIs, web services, and enterprise middleware platforms.
· Strong knowledge of IAM governance, user lifecycle management, access certification, role-based access control (RBAC), and regulatory compliance requirements.
· Excellent stakeholder management, communication, presentation, and leadership skills with the ability to influence executive and technical audiences.
Preferred Qualifications
· Experience in large enterprise IAM modernization and cloud transformation programs.
· Industry certifications such as CISSP, CISM, SailPoint, CyberArk, Okta, Azure Identity, or cloud security certifications.
· Knowledge of Zero Trust architecture principles and modern identity security frameworks.
· Experience with PKI, SOA architecture, and enterprise security governance initiatives.
#LI-EF1
#CB
#Ind123
Applications will be accepted until 24 Jul 2026.
Salary and Other Compensation:
The annual salary for this position is between $[162,000 - 191,000] depending on experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
· Medical/Dental/Vision/Life Insurance
· Paid holidays plus Paid Time Off
· 401(k) plan and contributions
· Long-term/Short-term Disability
· Paid Parental Leave
· Employee Stock Purchase Plan
关于高知特 (Cognizant)
高知特(Cognizant)（纳斯达克代码：CTSH）作为一家AI Builder和相关技术服务提供商，致力于通过打造全栈AI解决方案，帮助企业将人工智能投资转化为实际价值。公司凭借深厚的行业经验、流程优化和工程技术专长，将企业独特的业务场景融入科技系统，赋能组织释放人才潜能，推动切实成果，并帮助全球企业在瞬息万变的环境中保持领先。如需了解更多详情，敬请访问 cognizant.ai 或关注@cognizant。
补充雇佣信息
薪酬信息截至本职位发布之日为准。Cognizant 保留在适用法律允许的范围内随时修改该信息的权利。
申请人可能需要通过现场面试或视频会议的方式参加面试。此外，候选人在每次面试时可能需要出示其当前所在州或政府签发的有效身份证件。
Cognizant 是一家提供平等就业机会的雇主。在招聘过程中，您的申请和候选资格不会因种族、肤色、性别、宗教、信仰、性取向、性别认同、国籍、残疾、遗传信息、怀孕、退伍军人身份或任何其他受联邦、州或地方法律保护的特征而受到影响。
