About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.
Job Summary
We are seeking an experienced Solution Architect – Security, API & Cloud Infrastructure to lead the end-to-end design of secure, scalable enterprise solutions within the financial services domain. This role will combine deep expertise in security architecture, Apigee API management, AWS, Akamai, Cloudflare, DNS, encryption, PKI, and fraud prevention platforms. The architect will guide solutions from discovery and design through implementation and operational handover while ensuring alignment with enterprise standards and regulatory requirements. The ideal candidate will bring strong technical leadership, architecture governance, and stakeholder management capabilities.
Responsibilities:
- Lead end-to-end solution architecture across security, API, edge, and cloud domains, from requirements discovery through implementation and operational handover.
- Define reference architectures, reusable patterns, technical standards, and design principles aligned with enterprise architecture frameworks and governance requirements.
- Produce high-quality HLDs, LLDs, data flow diagrams, sequence diagrams, threat models, architecture decisions, and implementation guidance.
- Design enterprise security solutions covering encryption, key management, HSMs, PKI, certificate lifecycle management, tokenization, and identity or fraud prevention capabilities.
- Architect and govern Apigee solutions, including API proxies, shared flows, OAuth/OIDC controls, rate limiting, analytics, developer portals, and API security policies.
- Design edge security, CDN, WAF, DDoS protection, bot management, DNSSEC, traffic routing, failover, and multi-CDN solutions using Akamai and Cloudflare.
- Architect secure AWS solutions using services such as VPC, IAM, KMS, CloudFront, Route 53, GuardDuty, Security Hub, WAF, Shield, Lambda, ECS/EKS, and API Gateway.
- Conduct architecture reviews, threat modelling, risk assessments, proof-of-concept evaluations, and vendor assessments for new and existing solutions.
- Participate in architecture review boards and design authority forums while managing standards, exceptions, technical debt, and architectural compliance.
- Mentor engineering teams and collaborate with enterprise architects, product owners, security teams, and vendors to deliver secure and compliant solutions.
Qualifications:
- 8+ years of experience in solution or technical architecture roles, including at least 5 years focused on security architecture.
- Strong hands-on expertise with Apigee, including API proxy design, shared flows, target servers, security policies, analytics, and developer portals.
- Experience with Akamai and/or Cloudflare capabilities, including WAF, bot management, DDoS protection, edge compute, CDN, and DNS.
- Deep knowledge of encryption and security technologies, including TLS 1.2/1.3, AES-256, RSA, elliptic-curve cryptography, HSMs, PKI, tokenization, and certificate management.
- Strong experience with enterprise DNS architecture, including DNSSEC, GSLB, authoritative and recursive DNS, traffic management, failover, and TTL strategies.
- Practical experience with ThreatMetrix or comparable digital identity, device intelligence, and fraud prevention platforms.
- Strong AWS architecture expertise, including cloud security, IAM, networking, API services, serverless, containers, monitoring, and Infrastructure as Code.
- Experience with DevSecOps, CI/CD, Terraform, CloudFormation, microservices, event-driven architecture, REST, GraphQL, and messaging or streaming patterns.
- Financial services experience is essential, with knowledge of PCI-DSS, SOX, GDPR, PSD2, Open Banking, and related regulatory requirements.
- Experience with TOGAF, C4, arc42, or similar architecture practices and tools such as Lucidchart or Draw.io; AWS Solutions Architect Professional certification is preferred.
Applications will be accepted until 25 Sep 2026.
Salary and Other Compensation:
The annual salary for this position is between $[124,000 - 143,000] depending on experience and other qualifications of the successful candidate. This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
- Medical/Dental/Vision/Life Insurance
- Paid holidays plus Paid Time Off
- 401(k) plan and contributions
- Long-term/Short-term Disability
- Paid Parental Leave
- Employee Stock Purchase Plan
About us:
Cognizant is one of the world's leading professional services companies, transforming clients' business, operating, and technology models for the digital era. Our unique industry-based, consultative approach helps clients envision, build, and run more innovative and efficient businesses. Headquartered in the U.S., Cognizant (a member of the NASDAQ-100 and one of Forbes World’s Best Employers 2024) is consistently listed among the most admired companies in the world. Learn how Cognizant helps clients lead with digital at www.cognizant.com
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
Disclaimer:
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.