Job Summary
This cyber security architect role focuses on designing and optimizing secure internet access and remote connectivity solutions within a hybrid work model for a global organization. The architect should have network Security technologies such as Radware DDoS Reverse Proxy etc.
Responsibilities
Lead the onboarding of new protected assets configure traffic diversion (BGP or DNS) and manage GRE tunnels and scrubbing center routing.Work alongside Radware Cyber Controller to ensure seamless operation of hybrid and always on DDoS models.Must have a good networking background and understanding
Knowledge of protocols BGP OSPF EIGRP SPT TRUNKS VLANs
Experience with Wireshark or other protocol analysers
Oversee proxy operation activities by defining monitoring standards alerting thresholds and operational runbooks that enable rapid detection of anomalies and maintain high service availability and stability.Provide expert guidance during cyber security incident management by analyzing proxy and VPN logs performing root cause assessments and coordinating containment and recovery actions that minimize business disruption.Architect secure remote access solutions leveraging Cisco VPN to deliver resilient connectivity for a hybrid work model ensuring robust authentication strong encryption and compliant access to internal resources.Implement reverse proxy tools to protect internet facing applications by enforcing strong access controls inspecting traffic and integrating with web application security measures that reduce risk of compromise.Define security policies and configuration baselines for proxy platforms and cloud security gateways that comply with regulatory requirements and internal standards contributing to a consistent enterprise security posture.Collaborate with infrastructure and application teams to integrate proxy services VPN solutions and cloud security platforms into existing network designs ensuring compatibility scalability and maintainability.Establish detailed operational procedures for incident management including playbooks escalation paths and communication protocols that enable timely response and transparent reporting to stakeholders.Evaluate emerging security threats and trends related to web access remote connectivity and cloud security to recommend architecture enhancements that improve resilience and support the organizations long term security strategy.Document security architectures configurations and operational guidelines for proxy systems VPN platforms and incident workflows creating clear references that support knowledge sharing and future audits.Coordinate security testing validation and continuous improvement initiatives for proxy environments and remote access solutions using metrics and feedback to refine controls and strengthen protection across the enterprise.
Qualifications
4 to 15 years hands on experience with Network Security appliances
Lead the onboarding of new protected assets configure traffic diversion (BGP or DNS) and manage GRE tunnels and scrubbing center routing.
Work alongside Radware Cyber Controller to ensure seamless operation of hybrid and always on DDoS models.
Must have a good networking background and understanding
Knowledge of protocols BGP OSPF EIGRP SPT TRUNKS VLANs
Experience with Wireshark or other protocol analysers
Show strong proficiency in Cisco VPN technologies including configuration of secure tunnels user access policies and high availability designs that support hybrid work scenarios and remote users.Apply advanced understanding of network security concepts web protocols and encryption technologies to design solutions that balance usability performance and protection.Demonstrate effective communication and collaboration skills to work closely with cross functional teams translating technical risks and solutions into clear actionable guidance for diverse stakeholders.
Certifications Required
Certified Information Systems Security Professional CISSP or equivalent vendor certification related to Zscaler or Cisco security technologies
Over Cognizant
Cognizant (NASDAQ: CTSH) is een bouwer van AI-oplossingen en een leverancier van technologiediensten. Wij slaan de brug tussen AI-investeringen en ondernemingswaarde door het bouwen van full-stack AI-oplossingen voor onze klanten. Onze diepgaande kennis van sectoren, processen en engineering stelt ons in staat om de unieke context van een organisatie te verankeren in technologische systemen. Deze systemen versterken het menselijk potentieel, realiseren tastbare resultaten en geven wereldwijde ondernemingen een voorsprong in een snel veranderende wereld. Ontdek hoe op cognizant.ai of @cognizant.
Aanvullende arbeidsinformatie
De informatie over de beloning is correct op de datum van deze vacature. Cognizant behoudt zich het recht voor om deze informatie op elk moment te wijzigen, met inachtneming van de toepasselijke wetgeving.
Van sollicitanten kan worden verwacht dat zij gesprekken bijwonen, persoonlijk of via een videogesprek. Daarnaast kan van kandidaten worden gevraagd om tijdens elk gesprek een geldig, door de overheid uitgegeven identiteitsbewijs (zoals een identiteitskaart of paspoort) te tonen.
Cognizant is een werkgever die gelijke kansen biedt. Je sollicitatie en kandidatuur worden niet beoordeeld op basis van ras, huidskleur, geslacht, religie, levensovertuiging, seksuele geaardheid, genderidentiteit, nationale afkomst, handicap, genetische informatie, zwangerschap, veteranenstatus of enige andere eigenschap die wordt beschermd door federale, regionale of lokale wetgeving.
