Cloud Architect -Database Access Control Toolkit

About the job

Role: Cloud Architect -DACT

Location: Remote (Anywhere in USA)

Job Description:

· DACT (Database Access Control Toolkit) is a regulatory-required and TR-mandated control that currently only works for Aurora and DynamoDB. Designing and implementing cloud-native database access controls, extending existing DACT coverage where feasible and building replacement capabilities where required. Removing the top blocker for Sybase ASE/DB2 to Aurora PostgreSQL database migration

· Design and implement cloud-native Database Access Control (DACT) frameworks.

· Develop and administer Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.

· Configure and manage database security controls, including roles, privileges, schemas, grants, and row-level security.

· Implement and govern database access policies across multiple database platforms.

· Integrate AWS IAM, SSO, and federated authentication mechanisms with database authorization frameworks.

· Design secure database architectures for AWS cloud environments.

· Ensure compliance with enterprise security, governance, audit, and regulatory requirements.

· Support cloud database modernization and migration initiatives.

· Develop automation for database provisioning, security controls, and compliance reporting.

· Collaborate with security, cloud, infrastructure, and application teams to establish enterprise-wide database security standards.

· Produce technical documentation, operational runbooks, and security procedures.

Looking for expert skills in the below areas:

· Sybase ASE/DB2

· Aurora PostgreSQL

· AWS Security & Identity Management

· Cloud Database Architecture & Migration

· RBAC & ABAC Authorization Models

AWS CDK Expertise (Mandatory)

• Hands-on experience building and managing AWS infrastructure using AWS Cloud Development Kit (CDK).
• Strong experience developing reusable CDK constructs, stacks, and deployment pipelines.
• Expertise in Infrastructure as Code (IaC) principles and automated provisioning of AWS resources.
• Experience implementing multi-account and multi-environment AWS deployments using CDK.
• Ability to troubleshoot, optimize, and maintain CDK-based infrastructure solutions.

Salary and Other Compensation:

The annual salary for this position is between $125,000 to $135,000 yearly depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.