About the role
As a Senior Security Architect – IAM/PAM, you will make an impact by acting as the primary technical authority bridging Security Operations (SecOps), Identity and Access Management (IAM), Privileged Access Management (PAM), and Endpoint Detection and Response (EDR) — designing, implementing, and maintaining secure infrastructure across our SailPoint, CyberArk, and CrowdStrike platforms.
You will be a valued member of the Security Operations team and work collaboratively with IAM, PAM, and EDR teams, business owners, application teams, HR, security stakeholders, and vendors to translate business requirements into secure, compliant configurations.
In this role, you will:
- Lead SailPoint IDN and CyberArk architecture and delivery — serve as technical lead for deployments, upgrades, and integrations, including connectors, workflows, rules, role models, and Dev/QA/Prod migrations.
- Own the identity governance lifecycle — define and implement Joiner-Mover-Leaver (JML) processes, build RBAC frameworks and entitlement catalogues, maintain Separation of Duties (SoD) policies, and run access certification/recertification campaigns.
- Drive EDR detection and response — lead the review and management of CrowdStrike Falcon alerts and SIEM policies, and collaborate with security teams to strengthen threat detection and response capabilities.
- Ensure regulatory compliance and audit readiness — align IAM/PAM/EDR operations with frameworks such as APRA CPS 234/230, NIST, GDPR, ISO 27001, and HIPAA/PCI-DSS, and produce compliance reports and evidence packages for internal and external audits.
- Integrate and document enterprise systems — connect SailPoint IDN with Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow via SCIM, REST/SOAP APIs, and JDBC; write and maintain Bean Shell/Java rules, workflows, and reporting dashboards; and keep solution design documents, runbooks, and operational guides current.
Work model
We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position in a client or Cognizant office in Brisbane, Queensland. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured, we will always be clear about role expectations.
What you need to have to be considered
- Strong, hands-on experience with SailPoint IdentityNow (IDN) and CyberArk (certified)
- Working experience with CrowdStrike Falcon EDR, Airlock Digital, Active Directory, and GRC tools
- Application integration experience using SCIM, REST/SOAP APIs, and JDBC to connect Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow
- Strong understanding of identity governance principles, including RBAC, SoD, least privilege, and JML lifecycle management
These will help you stand out
- SailPoint Certified IdentityIQ / ISC Architect
- CyberArk Certified Delivery Engineer (CDE) or Trustee
- CrowdStrike Certified Engineer (CCE), CrowdStrike Certified Falcon Administrator (CCFA), or above
- ITIL Foundation certification
- Experience in large-scale enterprise environments (10,000+ identities) and exposure to Zero Trust architecture principles
Qualifications/Certifications
- SailPoint Certified IdentityIQ / ISC Architect
- CyberArk Certified Delivery Engineer (CDE) or Trustee
- CrowdStrike Certified Engineer (CCE) or CrowdStrike Certified Falcon Administrator (CCFA), or above
- ITIL Foundation certification
Salary Range: >$100,000
Date of Posting: 03-Jul-26
Next Steps: If you feel this opportunity suits you, or Cognizant is the type of organization you would like to join, we want to have a conversation with you! Please apply directly with us.
For a complete list of open opportunities with Cognizant, visit http://www.cognizant.com/careers. Cognizant is committed to providing Equal Employment Opportunities. Successful candidates will be required to undergo a background check.
Acerca de Cognizant
Cognizant (Nasdaq: CTSH) es un creador de soluciones de IA y proveedor de servicios tecnológicos que conecta la inversión en IA con el valor empresarial mediante el desarrollo de soluciones de IA full‑stack para sus clientes. Su profundo conocimiento de la industria, junto con su experiencia en procesos e ingeniería, permite incorporar el contexto único de cada organización en sistemas tecnológicos que amplifican el potencial humano, generan resultados tangibles y mantienen a las empresas a la vanguardia en un entorno en constante cambio. Más información en cognizant.ai o @cognizant.
Información adicional de empleo
La información de compensación es precisa a la fecha de esta publicación. Cognizant se reserva el derecho de modificar esta información en cualquier momento, sujeto a la legislación aplicable.
Es posible que se requiera que los solicitantes asistan a entrevistas en persona o por videoconferencia. Además, es posible que se requiera que los candidatos presenten su identificación actual emitida por el estado o gobierno durante cada entrevista.
Cognizant es un empleador que ofrece igualdad de oportunidades. Tu solicitud y candidatura no serán consideradas en base a raza, color, sexo, religión, credo, orientación sexual, identidad de género, origen nacional, discapacidad, información genética, embarazo, condición de veterano o cualquier otra característica protegida por las leyes federales, estatales o locales.
Si tienes una discapacidad que requiere adaptaciones razonables para buscar una vacante de trabajo o enviar una solicitud, puedes enviar un correo electrónico a [email protected] con tu solicitud e información de contacto.
