Security / Identity Engineer – Forward Deployed Engineer

Cognizant is an AI builder and technology services provider that delivers full-stack technology solutions to enterprise clients. The company is seeking a Security / Identity Engineer – Forward Deployed Engineer to design and implement secure identity, entitlement, authorization, and cross-account observability solutions across large AWS environments. The role partners with client engineering and security teams while developing APIs, policy engines, and Infrastructure-as-Code solutions for scalable platform operations.

Responsibilities:

• Design and implement identity and entitlement solutions leveraging AWS IAM Identity Center (IdC), SAML/OIDC federation, and enterprise authentication systems
• Integrate observability platforms with existing credential-vending systems, federation services, and enterprise identity architectures
• Develop policy engines to enforce data access boundaries across SRE, application, and business teams
• Architect and automate cross-account aggregation of logs, metrics, traces, and operational telemetry across multiple AWS Organizations
• Design, build, and deploy APIs that securely access CloudWatch, CloudTrail, and flow log data while enforcing authorization controls
• Implement scalable caching, routing, and access control mechanisms to support high-volume observability workloads
• Develop Infrastructure-as-Code solutions using Terraform or AWS CDK to automate deployment and lifecycle management
• Leverage AWS Organizations and CloudFormation StackSets to deploy integrations and configurations across large-scale AWS environments
• Produce architecture documentation, integration guides, operational runbooks, and knowledge-transfer materials
• Partner with client SRE, Security, Platform Engineering, and Observability leadership teams as an embedded technical SME to drive successful adoption and operational readiness

Requirements:

• 8+ years of experience in Cloud Engineering, Identity Engineering, Security Engineering, Platform Engineering, or AWS Architecture roles
• Expert-level experience with SAML, OIDC, enterprise federation, and AWS IAM Identity Center (AWS SSO)
• Strong expertise with AWS CloudWatch, CloudTrail, cross-account observability, and enterprise monitoring architectures
• Deep knowledge of AWS Organizations, Organization-wide governance controls, CloudFormation StackSets, and multi-account AWS environments
• Hands-on experience developing APIs and backend services using Python, Go, or Java
• Strong Infrastructure-as-Code expertise with Terraform and/or AWS CDK
• Experience designing authorization models, policy engines, entitlement frameworks, and identity governance controls
• Strong understanding of cloud security, IAM architecture, observability, and enterprise platform operations
• Experience working within large-scale AWS environments supporting thousands of cloud accounts and centralized platform services
• Excellent communication, stakeholder management, troubleshooting, and documentation skills
• Experience working as an embedded Forward Deployed Engineer (FDE), Resident Architect, or Customer-Facing Platform Engineer
• Familiarity with enterprise landing zone architectures and custom credential-vending solutions
• Experience supporting large-scale observability platforms and centralized logging architectures
• AWS certifications such as AWS Solutions Architect, Security Specialty, or Advanced Networking Specialty
• Experience supporting SRE, Platform Engineering, or Cloud Center of Excellence (CCoE) teams