Cyber Security Architect, Chennai, Tamil Nadu, India

Job Summary

This cyber security architect role focuses on designing and optimizing secure internet access and remote connectivity solutions within a hybrid work model for a global organization. The architect should have network Security technologies such as Radware DDoS Reverse Proxy etc.

Responsibilities

Lead the onboarding of new protected assets configure traffic diversion (BGP or DNS) and manage GRE tunnels and scrubbing center routing.

Work alongside Radware Cyber Controller to ensure seamless operation of hybrid and always on DDoS models.

Must have a good networking background and understanding

Knowledge of protocols BGP OSPF EIGRP SPT TRUNKS VLANs

Experience with Wireshark or other protocol analysers

Oversee proxy operation activities by defining monitoring standards alerting thresholds and operational runbooks that enable rapid detection of anomalies and maintain high service availability and stability.

Provide expert guidance during cyber security incident management by analyzing proxy and VPN logs performing root cause assessments and coordinating containment and recovery actions that minimize business disruption.

Architect secure remote access solutions leveraging Cisco VPN to deliver resilient connectivity for a hybrid work model ensuring robust authentication strong encryption and compliant access to internal resources.

Implement reverse proxy tools to protect internet facing applications by enforcing strong access controls inspecting traffic and integrating with web application security measures that reduce risk of compromise.

Define security policies and configuration baselines for proxy platforms and cloud security gateways that comply with regulatory requirements and internal standards contributing to a consistent enterprise security posture.

Collaborate with infrastructure and application teams to integrate proxy services VPN solutions and cloud security platforms into existing network designs ensuring compatibility scalability and maintainability.

Establish detailed operational procedures for incident management including playbooks escalation paths and communication protocols that enable timely response and transparent reporting to stakeholders.

Evaluate emerging security threats and trends related to web access remote connectivity and cloud security to recommend architecture enhancements that improve resilience and support the organizations long term security strategy.

Document security architectures configurations and operational guidelines for proxy systems VPN platforms and incident workflows creating clear references that support knowledge sharing and future audits.

Coordinate security testing validation and continuous improvement initiatives for proxy environments and remote access solutions using metrics and feedback to refine controls and strengthen protection across the enterprise.

Qualifications

4 to 15 years hands on experience with Network Security appliances

Lead the onboarding of new protected assets configure traffic diversion (BGP or DNS) and manage GRE tunnels and scrubbing center routing.

Work alongside Radware Cyber Controller to ensure seamless operation of hybrid and always on DDoS models.

Must have a good networking background and understanding

Knowledge of protocols BGP OSPF EIGRP SPT TRUNKS VLANs

Experience with Wireshark or other protocol analysers

Show strong proficiency in Cisco VPN technologies including configuration of secure tunnels user access policies and high availability designs that support hybrid work scenarios and remote users.

Apply advanced understanding of network security concepts web protocols and encryption technologies to design solutions that balance usability performance and protection.

Demonstrate effective communication and collaboration skills to work closely with cross functional teams translating technical risks and solutions into clear actionable guidance for diverse stakeholders.

Certifications Required

Certified Information Systems Security Professional CISSP or equivalent vendor certification related to Zscaler or Cisco security technologies

Things to know before you apply

Work authorization: Cognizant will only consider applicants for this position who are legally authorized to work in Canada without requiring employer sponsorship, now or at any time in the future.
Accommodations: If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] with your request and contact information.
AI in hiring: We use artificial intelligence (AI) tools to help us screen and assess applications more efficiently. Our team performs additional human review and ultimately decides who moves forward in our hiring process.
Open position: Unless otherwise stated, this job posting is for an open position on our team.
Language proficiency: We ask that all candidates have basic English proficiency for company-wide communications purposes. For roles based in Quebec, professional English proficiency is required, as you’ll deliver services to and collaborate with stakeholders outside the province who may not speak French.
Inclusion: Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, provincial or local laws.

About Cognizant
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.