Practice - CIS - Cloud, Infrastructure, and Security Services

Job Summary

This role is responsible for end-to-end security architecture for an enterprise Agentic AI platform and lead the data security strategy for AI. This senior role combines two critical responsibilities: Agentic AI Security Architecture and Data Security Posture Management (DSPM). The successful candidate will be accountable for designing a secure AI platform while protecting and governing the data that flows through AI agents and services.

*Please note, this role is not able to offer visa transfer or sponsorship now or in the future*

In this role, you will:
• Define, develop, and own the Agentic AI Reference Security Architecture, including Platform 1.0 security hardening and future roadmap enhancements.
• Implement, operationalize, and manage Microsoft Purview DSPM for AI, leveraging Microsoft FastTrack services where appropriate.
• Establish and maintain enterprise sensitivity labeling and machine learning-based auto-classification standards for AI-related data.
• Map, monitor, and govern data flows into and out of AI agents and AI-enabled workloads.
• Define security architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure Agentic AI solutions across a multi-cloud environment, including Azure and AWS, ensuring consistent security controls regardless of deployment location.
• Collaborate closely with Identity, Application Security (AppSec), and Governance, Risk, and Compliance (GRC) teams to ensure security controls are embedded into solutions from the design stage.

What you need to have to be considered
• Deep expertise in Azure and Microsoft 365 security architecture, including Microsoft Sentinel, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Proven experience designing and securing Agentic AI and Generative AI platforms in enterprise environments.
• Hands-on experience securing multi-cloud environments across Azure and AWS, including AWS Bedrock Agents, Lambda, and IAM.
• Strong expertise in Microsoft Purview, including DSPM for AI, sensitivity labeling, data flow mapping, information protection, and ML-based auto-classification.
• Strong understanding of AI security, API security, agent-to-agent, agent-to-API, and agent-to-data access patterns.
• Familiarity with Microsoft Copilot Studio and enterprise AI agent platforms.
• Experience implementing Zero Trust principles, identity security controls, and secure-by-design architectures.
• Proven track record of designing enterprise-scale security solutions within regulated environments.
• Strong knowledge of data governance, data protection, privacy, and compliance requirements for AI-enabled solutions.
• Excellent stakeholder management skills with the ability to partner effectively with Identity, AppSec, Engineering, and GRC teams.

Preferred Qualifications
• Experience within life sciences, healthcare, medical devices, pharmaceutical, or other regulated industries.
• Relevant certifications such as CISSP, SC-100, AZ-500, CCSP, or equivalent security certifications.
• Experience leading enterprise AI security, cloud security, or data protection initiatives at scale.

#LI-EF1

#CB

#Ind123

Applications will be accepted until 16 Aug 2026.

Salary and Other Compensation:

The annual salary for this position is between $[160,000 - 185,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan



Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.