Note: The job is a remote job and is open to candidates in USA. Cognizant’s Cloud, Infrastructure, and Security Services Practice helps customers modernize cloud infrastructure, workplaces, and operations in secure environments. The Security / Identity Engineer – Forward Deployed Engineer will design and implement identity, entitlement, authorization, and cross-account observability solutions across large AWS environments, while developing APIs and infrastructure-as-code automation. The role partners with client SRE, Security, Platform Engineering, and Observability teams as an embedded technical subject matter expert.
Responsibilities
- Design and implement identity and entitlement solutions leveraging AWS IAM Identity Center (IdC), SAML/OIDC federation, and enterprise authentication systems
- Integrate observability platforms with existing credential-vending systems, federation services, and enterprise identity architectures
- Develop policy engines to enforce data access boundaries across SRE, application, and business teams
- Architect and automate cross-account aggregation of logs, metrics, traces, and operational telemetry across multiple AWS Organizations
- Design, build, and deploy APIs that securely access CloudWatch, CloudTrail, and flow log data while enforcing authorization controls
- Implement scalable caching, routing, and access control mechanisms to support high-volume observability workloads
- Develop Infrastructure-as-Code solutions using Terraform or AWS CDK to automate deployment and lifecycle management
- Leverage AWS Organizations and CloudFormation StackSets to deploy integrations and configurations across large-scale AWS environments
- Produce architecture documentation, integration guides, operational runbooks, and knowledge-transfer materials
- Partner with client SRE, Security, Platform Engineering, and Observability leadership teams as an embedded technical SME to drive successful adoption and operational readiness
Skills
- 8+ years of experience in Cloud Engineering, Identity Engineering, Security Engineering, Platform Engineering, or AWS Architecture roles
- Expert-level experience with SAML, OIDC, enterprise federation, and AWS IAM Identity Center (AWS SSO)
- Strong expertise with AWS CloudWatch, CloudTrail, cross-account observability, and enterprise monitoring architectures
- Deep knowledge of AWS Organizations, Organization-wide governance controls, CloudFormation StackSets, and multi-account AWS environments
- Hands-on experience developing APIs and backend services using Python, Go, or Java
- Strong Infrastructure-as-Code expertise with Terraform and/or AWS CDK
- Experience designing authorization models, policy engines, entitlement frameworks, and identity governance controls
- Strong understanding of cloud security, IAM architecture, observability, and enterprise platform operations
- Experience working within large-scale AWS environments supporting thousands of cloud accounts and centralized platform services
- Excellent communication, stakeholder management, troubleshooting, and documentation skills
- Experience working as an embedded Forward Deployed Engineer (FDE), Resident Architect, or Customer-Facing Platform Engineer
- Familiarity with enterprise landing zone architectures and custom credential-vending solutions
- Experience supporting large-scale observability platforms and centralized logging architectures
- AWS certifications such as AWS Solutions Architect, Security Specialty, or Advanced Networking Specialty
- Experience supporting SRE, Platform Engineering, or Cloud Center of Excellence (CCoE) teams
Benefits
- Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
- Medical/Dental/Vision/Life Insurance
- Paid holidays plus Paid Time Off
- 401(k) plan and contributions
- Long-term/Short-term Disability
- Paid Parental Leave
- Employee Stock Purchase Plan
Company Overview