Senior Security Architect – IAM/PAM, Brisbane, Queensland, Australia

About the role

As a Senior Security Architect – IAM/PAM, you will make an impact by acting as the primary technical authority bridging Security Operations (SecOps), Identity and Access Management (IAM), Privileged Access Management (PAM), and Endpoint Detection and Response (EDR) — designing, implementing, and maintaining secure infrastructure across our SailPoint, CyberArk, and CrowdStrike platforms.

You will be a valued member of the Security Operations team and work collaboratively with IAM, PAM, and EDR teams, business owners, application teams, HR, security stakeholders, and vendors to translate business requirements into secure, compliant configurations.

In this role, you will:

Lead SailPoint IDN and CyberArk architecture and delivery — serve as technical lead for deployments, upgrades, and integrations, including connectors, workflows, rules, role models, and Dev/QA/Prod migrations.
Own the identity governance lifecycle — define and implement Joiner-Mover-Leaver (JML) processes, build RBAC frameworks and entitlement catalogues, maintain Separation of Duties (SoD) policies, and run access certification/recertification campaigns.
Drive EDR detection and response — lead the review and management of CrowdStrike Falcon alerts and SIEM policies, and collaborate with security teams to strengthen threat detection and response capabilities.
Ensure regulatory compliance and audit readiness — align IAM/PAM/EDR operations with frameworks such as APRA CPS 234/230, NIST, GDPR, ISO 27001, and HIPAA/PCI-DSS, and produce compliance reports and evidence packages for internal and external audits.
Integrate and document enterprise systems — connect SailPoint IDN with Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow via SCIM, REST/SOAP APIs, and JDBC; write and maintain Bean Shell/Java rules, workflows, and reporting dashboards; and keep solution design documents, runbooks, and operational guides current.

Work model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position in a client or Cognizant office in Brisbane, Queensland. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured, we will always be clear about role expectations.

What you need to have to be considered

Strong, hands-on experience with SailPoint IdentityNow (IDN) and CyberArk (certified)
Working experience with CrowdStrike Falcon EDR, Airlock Digital, Active Directory, and GRC tools
Application integration experience using SCIM, REST/SOAP APIs, and JDBC to connect Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow
Strong understanding of identity governance principles, including RBAC, SoD, least privilege, and JML lifecycle management

These will help you stand out

SailPoint Certified IdentityIQ / ISC Architect
CyberArk Certified Delivery Engineer (CDE) or Trustee
CrowdStrike Certified Engineer (CCE), CrowdStrike Certified Falcon Administrator (CCFA), or above
ITIL Foundation certification
Experience in large-scale enterprise environments (10,000+ identities) and exposure to Zero Trust architecture principles

Qualifications/Certifications

SailPoint Certified IdentityIQ / ISC Architect
CyberArk Certified Delivery Engineer (CDE) or Trustee
CrowdStrike Certified Engineer (CCE) or CrowdStrike Certified Falcon Administrator (CCFA), or above
ITIL Foundation certification

Salary Range: >$100,000

Date of Posting: 03-Jul-26

Next Steps: If you feel this opportunity suits you, or Cognizant is the type of organization you would like to join, we want to have a conversation with you! Please apply directly with us.

For a complete list of open opportunities with Cognizant, visit http://www.cognizant.com/careers. Cognizant is committed to providing Equal Employment Opportunities. Successful candidates will be required to undergo a background check.

Sobre a Cognizant
Cognizant (NASDAQ: CTSH) é uma construtora de IA e fornecedora de serviços de tecnologia, criando a ponte entre o investimento em IA e o valor para as empresas por meio do desenvolvimento de soluções de IA completas para nossos clientes. Nossa profunda experiência em setores, processos e engenharia nos permite incorporar o contexto único de cada organização em sistemas tecnológicos que potencializam a capacidade humana, geram resultados tangíveis e mantêm empresas globais à frente em um mundo em rápida transformação. Saiba mais em cognizant.ai ou @cognizant.

A Cognizant é uma empregadora que investe em equidade. Sua candidatura não será pautada em raça, cor, gênero, sexualidade, credo, origem, deficiência, gravidez ou qualquer outra característica protegida pelas leis brasileiras.

Informações adicionais de emprego
Os candidatos podem ser obrigados a comparecer a entrevistas presenciais ou por videoconferência. Além disso, os candidatos podem ser obrigados a apresentar seu documento de identificação emitido pelo estado ou governo atual durante cada entrevista.

Embora nosso sistema permita a candidatura em todos os idiomas, o(s) idioma(s) e o(s) nível(is) de proficiência exigidos para o trabalho variam. No entanto, é necessário um nível básico de inglês para fins de comunicação em toda a empresa.

Se você tem uma deficiência que requer adaptações razoáveis para procurar uma vaga de emprego ou enviar uma candidatura, envie um e-mail para [email protected] com sua solicitação e informações de contato.