IAM Solutions Architect

About the role

Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS) helps customers transform their infrastructure and workplace to meet the evolving needs of the digital era. Our practice focuses on cloud-driven modernization and workplace and operational transformation in a secure environment.

Responsibilities

• Lead the architecture, design, and implementation of enterprise IAM solutions covering identity governance, authentication, authorization, federation, single sign-on (SSO), and privileged access management.
• Define IAM roadmaps, reference architectures, integration standards, and modernization strategies aligned with business and security objectives.
• Partner with security, infrastructure, application, and engineering teams to design scalable and secure IAM services across enterprise, B2B, and B2C environments.
• Evaluate IAM technologies and provide recommendations for platform enhancements, product selection, and future-state architecture.
• Design and govern integrations leveraging OAuth, OpenID Connect (OIDC), SAML, SCIM, Kerberos, WS-Federation, and related identity protocols.
• Drive architecture reviews, proof-of-concept, risk assessments, and remediation strategies for IAM-related initiatives.
• Support implementation and optimization of Identity Governance and Administration (IGA), Access Management, Privileged Access Management (PAM), and Directory Services solutions.
• Collaborate with application teams to gather requirements, define integration patterns, and deliver IAM onboarding solutions.
• Develop architecture standards, technical documentation, governance models, and operational best practices.
• Mentor engineering teams and provide technical leadership for enterprise IAM transformation programs.

Requirements

• 12+ years of overall IT experience with 9+ years of IAM-focused technical leadership experience.
• 6+ years of experience in IAM architecture, solution design, and enterprise identity transformation initiatives.
• Deep expertise with Identity Management platforms such as SailPoint, CA Identity Manager, or equivalent IGA solutions.
• Strong experience with Access Management technologies such as Okta, SiteMinder, Azure AD, and enterprise SSO platforms.
• Experience with Privileged Access Management solutions such as CyberArk or similar platforms.
• Extensive knowledge of modern identity standards including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, Kerberos, and WS-Federation.
• Strong understanding of Active Directory, Azure Active Directory, enterprise directory architecture, and LDAP services.
• Experience designing secure cloud identity solutions across AWS, Azure, and hybrid enterprise environments.
• Familiarity with application integration technologies, Java/J2EE, .NET, APIs, web services, and enterprise middleware platforms.
• Strong knowledge of IAM governance, user lifecycle management, access certification, role-based access control (RBAC), and regulatory compliance requirements.
• Excellent stakeholder management, communication, presentation, and leadership skills with the ability to influence executive and technical audiences.

Preferred Qualifications

• Experience in large enterprise IAM modernization and cloud transformation programs.
• Industry certifications such as CISSP, CISM, SailPoint, CyberArk, Okta, Azure Identity, or cloud security certifications.
• Knowledge of Zero Trust architecture principles and modern identity security frameworks.
• Experience with PKI, SOA architecture, and enterprise security governance initiatives.

Pay

The annual salary for this position is between $[162,000 - 191,000] depending on experience and other qualifications of the successful candidate. This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan