Cloud Security Architect

Cognizant•Bridgewater, NJ

About The Position

This role is responsible for managing and optimizing our cloud security tooling and ensuring robust cloud security operations across IaaS, PaaS, and SaaS environments. The role will involve triaging and managing cloud security issues alongside providing expert consultancy to the business on cloud security risks and driving remediation efforts. Additionally, this role involves developing automation scripts, generating actionable security reports, and enabling data-driven insights through analytics and BI tools.

Requirements

5+ years of experience in cloud security engineering
Strong hands-on experience with major cloud platforms (AWS, Azure, GCP), cloud security tools and cloud-native security controls
Deep understanding of cloud security concepts, compliance frameworks, and best practices
Excellent problem-solving and analytical skills
Certifications such as CISSP, CCSP and/or cloud service provider security certifications such as AWS-SCS, AZ-500 and GCP PCSE.
Knowledge and experience working with cloud security tooling such as CSPM, CWP, CNAPP.

Responsibilities

Perform BAU operations for cloud security tooling across IaaS, PaaS, and SaaS platforms.
Drive and maintain full coverage of CNAPP and SSPM solutions across all cloud platforms, workloads, and SaaS applications.
Manage IAM operations related to cloud security tooling, including role-based access control, group management, and JML (Joiner-Mover-Leaver) processes.
Ensure integration and continuous improvement of security tooling to meet evolving business and compliance requirements.
Understanding of Kubernetes, Helm and YAML to support deployment of security capabilities across Kubernetes Clusters.
Design and implement security monitoring processes to detect, analyze, and respond to potential threats.
Monitor cloud security tooling for misconfigurations, vulnerabilities, and compliance gaps collaborating with business partners to ensure timely notification and remediation within agreed SLAs.
Provide expert level consultancy to business stakeholders on cloud security risks, clearly articulating technical issues and their business impact. Where remediation is not feasible, identify and guide implementation of compensating controls.
Evaluate and clearly articulate the operational impact of configuration changes to cloud resources, ensuring informed decision-making on business continuity.
Excellent written communication in documenting cloud security risk statements used to capture, manage and drive risk remediation of cloud security issues.
Collaborate with engineering and application teams to remediate issues and continuously improve the organization’s cloud security posture.
Develop and maintain scripts to extract security data from APIs and transform it into consumable formats.
Generate regular and ad-hoc security reports for management, highlighting key risks, trends, and remediation progress.
Leverage BI tools (e.g., Power BI) to create dashboards and visualizations that provide actionable insights into cloud security posture.
Explore opportunities for automation and analytics to enhance operational efficiency and risk visibility.