Senior Security Architect – IAM/PAM

About the role

As a Senior Security Architect – IAM/PAM, you will make an impact by acting as the primary technical authority bridging Security Operations (SecOps), Identity and Access Management (IAM), Privileged Access Management (PAM), and Endpoint Detection and Response (EDR) — designing, implementing, and maintaining secure infrastructure across our SailPoint, CyberArk, and CrowdStrike platforms.

You will be a valued member of the Security Operations team and work collaboratively with IAM, PAM, and EDR teams, business owners, application teams, HR, security stakeholders, and vendors to translate business requirements into secure, compliant configurations.

In this role, you will:

Lead SailPoint IDN and CyberArk architecture and delivery — serve as technical lead for deployments, upgrades, and integrations, including connectors, workflows, rules, role models, and Dev/QA/Prod migrations.

Own the identity governance lifecycle — define and implement Joiner-Mover-Leaver (JML) processes, build RBAC frameworks and entitlement catalogues, maintain Separation of Duties (SoD) policies, and run access certification/recertification campaigns.

Drive EDR detection and response — lead the review and management of CrowdStrike Falcon alerts and SIEM policies, and collaborate with security teams to strengthen threat detection and response capabilities.

Ensure regulatory compliance and audit readiness — align IAM/PAM/EDR operations with frameworks such as APRA CPS 234/230, NIST, GDPR, ISO 27001, and HIPAA/PCI-DSS, and produce compliance reports and evidence packages for internal and external audits.

Integrate and document enterprise systems — connect SailPoint IDN with Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow via SCIM, REST/SOAP APIs, and JDBC; write and maintain Bean Shell/Java rules, workflows, and reporting dashboards; and keep solution design documents, runbooks, and operational guides current.

Work model

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role's business requirements, this is a hybrid position in a client or Cognizant office in Brisbane, Queensland. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured, we will always be clear about role expectations.

What you need to have to be considered

Strong, hands-on experience with SailPoint IdentityNow (IDN) and CyberArk (certified)

Working experience with CrowdStrike Falcon EDR, Airlock Digital, Active Directory, and GRC tools

Application integration experience using SCIM, REST/SOAP APIs, and JDBC to connect Active Directory, Azure AD/Entra ID, Workday, SAP, and ServiceNow

Strong understanding of identity governance principles, including RBAC, SoD, least privilege, and JML lifecycle management

These will help you stand out

SailPoint Certified IdentityIQ / ISC Architect

CyberArk Certified Delivery Engineer (CDE) or Trustee

CrowdStrike Certified Engineer (CCE), CrowdStrike Certified Falcon Administrator (CCFA), or above

ITIL Foundation certification

Experience in large-scale enterprise environments (10,000+ identities) and exposure to Zero Trust architecture principles

Qualifications/Certifications

SailPoint Certified IdentityIQ / ISC Architect

CyberArk Certified Delivery Engineer (CDE) or Trustee

CrowdStrike Certified Engineer (CCE) or CrowdStrike Certified Falcon Administrator (CCFA), or above

ITIL Foundation certification

Salary Range: >$100,000

Date of Posting: 03-Jul-26

Next Steps: If you feel this opportunity suits you, or Cognizant is the type of organization you would like to join, we want to have a conversation with you! Please apply directly with us.

For a complete list of open opportunities with Cognizant, visit http://www.cognizant.com/careers . Cognizant is committed to providing Equal Employment Opportunities. Successful candidates will be required to undergo a background check.