About the role
As a Senior Security Architect – IAM/PAM, you will make an impact by acting as the primary technical authority bridging Security Operations (SecOps), Identity and Access Management (IAM), Privileged Access Management (PAM), and Endpoint Detection and Response (EDR) — designing, implementing, and maintaining secure infrastructure across our SailPoint, CyberArk, and CrowdStrike platforms.
You will be a valued member of the Security Operations team and work collaboratively with IAM, PAM, and EDR teams, business owners, application teams, HR, security stakeholders, and vendors to translate business requirements into secure, compliant configurations.
In this role, you will:
- Lead SailPoint IDN and CyberArk architecture and delivery — serve as technical lead for deployments, upgrades, and integrations, including connectors, workflows, rules, role models, and Dev/QA/Prod migrations.
- Own the identity governance lifecycle — define and implement Joiner-Mover-Leaver (JML) processes, build RBAC frameworks and entitlement catalogues, maintain Separation of Duties (SoD) policies, and run access certification/recertification campaigns.
- Drive EDR detection and response — lead the review and management of CrowdStrike Falcon alerts and SIEM policies, and collaborate with security teams to strengthen threat detection and response capabilities.
- Ensure regulatory compliance and audit readiness — align IAM/PAM/EDR operations with frameworks such as APRA CPS 234/230, NIST, GDPR, ISO 27001, and HIPAA/PCI-DSS, and produce compliance reports and evidence packages for internal and external audits.
- Integrate and document enterprise systems — connect SailPoint IDN with Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow via SCIM, REST/SOAP APIs, and JDBC; write and maintain Bean Shell/Java rules, workflows, and reporting dashboards; and keep solution design documents, runbooks, and operational guides current.
Work model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position in a client or Cognizant office in Brisbane, Queensland. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured, we will always be clear about role expectations.
What you need to have to be considered
- Strong, hands-on experience with SailPoint IdentityNow (IDN) and CyberArk (certified)
- Working experience with CrowdStrike Falcon EDR, Airlock Digital, Active Directory, and GRC tools
- Application integration experience using SCIM, REST/SOAP APIs, and JDBC to connect Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow
- Strong understanding of identity governance principles, including RBAC, SoD, least privilege, and JML lifecycle management
These will help you stand out
- SailPoint Certified IdentityIQ / ISC Architect
- CyberArk Certified Delivery Engineer (CDE) or Trustee
- CrowdStrike Certified Engineer (CCE), CrowdStrike Certified Falcon Administrator (CCFA), or above
- ITIL Foundation certification
- Experience in large-scale enterprise environments (10,000+ identities) and exposure to Zero Trust architecture principles
Qualifications/Certifications
- SailPoint Certified IdentityIQ / ISC Architect
- CyberArk Certified Delivery Engineer (CDE) or Trustee
- CrowdStrike Certified Engineer (CCE) or CrowdStrike Certified Falcon Administrator (CCFA), or above
- ITIL Foundation certification
Salary Range: >$100,000
Date of Posting: 03-Jul-26
Next Steps: If you feel this opportunity suits you, or Cognizant is the type of organization you would like to join, we want to have a conversation with you! Please apply directly with us.
For a complete list of open opportunities with Cognizant, visit http://www.cognizant.com/careers. Cognizant is committed to providing Equal Employment Opportunities. Successful candidates will be required to undergo a background check.
À propos de Cognizant
Cognizant (NASDAQ : CTSH) est un AI Builder et une entreprise de services numériques (ESN) élaborant des solutions complètes d’IA maximisant les investissements pour des résultats concrets. Sa profonde expertise des métiers, des processus et des technologies lui permet d’intégrer dans les systèmes technologiques le contexte unique de chaque organisation de l’ingénierie à la production à l’échelle. Son objectif : améliorer l’efficacité des équipes, créer de la valeur et permettre aux grandes entreprises de rester performantes dans un monde qui évolue rapidement. Pour en savoir plus : cognizant.ai ou @cognizant.
Renseignments suppplémentaires sur l'emploi
Les informations relatives à la rémunération du poste à pourvoir dépendent de la date de publication de l’offre de poste. Cognizant se réserve le droit de modifier ces informations à tout moment, sous réserve des lois applicables.
Cognizant est un employeur soucieux de l'égalité des chances entre candidats. Votre candidature sera étudiée indépendamment de votre race, couleur, sexe, religion, croyances, orientation sexuelle, identité de genre, origine, handicap, informations génétiques, grossesse, statut d'ancien militaire ou de toute autre critère jugé discriminant par les lois européennes ou françaises.
Vous êtes porteur d'un handicap, vous pouvez-nous contacter par courriel [email protected] si vous souhaitez préciser les aménagements nécessaires pour le poste ou les entretiens à venir.
Les candidats peuvent être invités à participer à des entretiens en face à face ou par vidéoconférence. En outre, les candidats peuvent être amenés à présenter une carte d'identité valide lors de chaque entretien.
