Note: The job is a remote job and is open to candidates in USA. Cognizant’s Cloud, Infrastructure, and Security Services Practice helps customers modernize cloud infrastructure, workplaces, and operations in secure environments. The Security / Identity Engineer – Forward Deployed Engineer will design and implement identity, entitlement, authorization, and cross-account observability solutions across large AWS environments, while developing APIs and infrastructure-as-code automation. The role partners with client SRE, Security, Platform Engineering, and Observability teams as an embedded technical subject matter expert.

Responsibilities

• Design and implement identity and entitlement solutions leveraging AWS IAM Identity Center (IdC), SAML/OIDC federation, and enterprise authentication systems
• Integrate observability platforms with existing credential-vending systems, federation services, and enterprise identity architectures
• Develop policy engines to enforce data access boundaries across SRE, application, and business teams
• Architect and automate cross-account aggregation of logs, metrics, traces, and operational telemetry across multiple AWS Organizations
• Design, build, and deploy APIs that securely access CloudWatch, CloudTrail, and flow log data while enforcing authorization controls
• Implement scalable caching, routing, and access control mechanisms to support high-volume observability workloads
• Develop Infrastructure-as-Code solutions using Terraform or AWS CDK to automate deployment and lifecycle management
• Leverage AWS Organizations and CloudFormation StackSets to deploy integrations and configurations across large-scale AWS environments
• Produce architecture documentation, integration guides, operational runbooks, and knowledge-transfer materials
• Partner with client SRE, Security, Platform Engineering, and Observability leadership teams as an embedded technical SME to drive successful adoption and operational readiness

Skills

• 8+ years of experience in Cloud Engineering, Identity Engineering, Security Engineering, Platform Engineering, or AWS Architecture roles
• Expert-level experience with SAML, OIDC, enterprise federation, and AWS IAM Identity Center (AWS SSO)
• Strong expertise with AWS CloudWatch, CloudTrail, cross-account observability, and enterprise monitoring architectures
• Deep knowledge of AWS Organizations, Organization-wide governance controls, CloudFormation StackSets, and multi-account AWS environments
• Hands-on experience developing APIs and backend services using Python, Go, or Java
• Strong Infrastructure-as-Code expertise with Terraform and/or AWS CDK
• Experience designing authorization models, policy engines, entitlement frameworks, and identity governance controls
• Strong understanding of cloud security, IAM architecture, observability, and enterprise platform operations
• Experience working within large-scale AWS environments supporting thousands of cloud accounts and centralized platform services
• Excellent communication, stakeholder management, troubleshooting, and documentation skills
• Experience working as an embedded Forward Deployed Engineer (FDE), Resident Architect, or Customer-Facing Platform Engineer
• Familiarity with enterprise landing zone architectures and custom credential-vending solutions
• Experience supporting large-scale observability platforms and centralized logging architectures
• AWS certifications such as AWS Solutions Architect, Security Specialty, or Advanced Networking Specialty
• Experience supporting SRE, Platform Engineering, or Cloud Center of Excellence (CCoE) teams

Benefits

• Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Company Overview