Cognizant is seeking an experienced Security Solution Architect, operating as an embedded member of the Client security architecture function. Working primarily on a large security transformation programme but may also be required to provide internal security consultation for Technology and business colleagues.
The role requires strong, broad security design expertise, with proven experience leading feasibility assessments and producing high‑level security designs across a wide range of solutions. The consultant must be able to take ownership of security design activities end‑to‑end, from early feasibility through to clear, implementable high‑level designs.
Key responsibilities include:
* Acting as a trusted security solution architect within Client, supporting change initiatives across IT and, where required, OT environments.
* Leading security feasibility, options analysis, and technical design for new and evolving solutions.
* Producing clear, high-quality high‑level security designs (HLDs) aligned to Client standards and risk appetite.
* Able to articulate complex solutions and problems concisely and effectively tailoring the message for the audience
* Confidence to analyse and make documented design decisions and advocate within governance forums (such as Technical Advisory Groups and Design Authority) and delivery teams for those decisions.
* Providing pragmatic security design input and assurance to delivery teams and stakeholders and conducting architectural governance reviews.
* Engaging effectively with technical and business stakeholders to shape secure, workable solutions.
Essential skills and experience:
* Strong background in cyber security solution design.
* Proven very strong experience in authoring high‑level security designs.
* Ability to assess, design, and articulate security solutions across multiple security domains.
* Confidence to operate independently within a large, regulated organisation.
* Experience of security design in hybrid cloud architectures, preferably Azure but AWS also advantageous
* Experience of working in an end-user (non SI/Consultancy) environment such as Client on large scale programmes with multiple partners and end-user parallel delivery requiring a collaborative and integrated approach.
* Strong communication and collaborative skills working closely with stakeholders and delivery teams, choosing in person communication wherever possible
* Skilled in the application and alignment of security frameworks such as NIST CSF
Nice to have (not essential):
* Experience within a water or utilities environment (regulated).
* Experience of the Networks and Information Systems Regulation (NIS-R) and PCI DSS
* Exposure to Operational Technology (OT).
* Experience with Identity and Access Management (IAM).
* Experience of securing data platforms and the wider data security domain
* Exposure to Zero Trust security models.
* Experience of securing artificial intelligence solutions
#J-18808-Ljbffr