HireMO

Role: Cloud Architect -DACT

Location: Remote (Anywhere in USA)

Job Description:

· DACT (Database Access Control Toolkit) is a regulatory-required and TR-mandated control that currently only works for Aurora and DynamoDB. Designing and implementing cloud-native database access controls, extending existing DACT coverage where feasible and building replacement capabilities where required. Removing the top blocker for Sybase ASE/DB2 to Aurora PostgreSQL database migration

· Design and implement cloud-native Database Access Control (DACT) frameworks.

· Develop and administer Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.

· Configure and manage database security controls, including roles, privileges, schemas, grants, and row-level security.

· Implement and govern database access policies across multiple database platforms.

· Integrate AWS IAM, SSO, and federated authentication mechanisms with database authorization frameworks.

· Design secure database architectures for AWS cloud environments.

· Ensure compliance with enterprise security, governance, audit, and regulatory requirements.

· Support cloud database modernization and migration initiatives.

· Develop automation for database provisioning, security controls, and compliance reporting.

· Collaborate with security, cloud, infrastructure, and application teams to establish enterprise-wide database security standards.

· Produce technical documentation, operational runbooks, and security procedures.

Looking for expert skills in the below areas:

· Sybase ASE/DB2

· Aurora PostgreSQL

· AWS Security & Identity Management

· Cloud Database Architecture & Migration

· RBAC & ABAC Authorization Models

AWS CDK Expertise (Mandatory)

+ Hands-on experience building and managing AWS infrastructure using AWS Cloud Development Kit (CDK).

+ Strong experience developing reusable CDK constructs, stacks, and deployment pipelines.

+ Expertise in Infrastructure as Code (IaC) principles and automated provisioning of AWS resources.

+ Experience implementing multi-account and multi-environment AWS deployments using CDK.

+ Ability to troubleshoot, optimize, and maintain CDK-based infrastructure solutions.

Salary and Other Compensation :

The annual salary for this position is between $125,000 to $135,000 yearly depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits : Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

+ Medical/Dental/Vision/Life Insurance

+ Paid holidays plus Paid Time Off

+ 401(k) plan and contributions

+ Long-term/Short-term Disability

+ Paid Parental Leave

+ Employee Stock Purchase Plan

Disclaimer: The compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

Apply Externally

Jobs

Cloud Architect -Database Access Control Toolkit

Summary

You Need a MO Jobs Account First

Jobs

Jobs

Cloud Architect -Database Access Control Toolkit

Summary

Do You Have a MO Jobs Account?

First, Let's Find Your MO Jobs Account

Create an Account to Apply

You Need a MO Jobs Account First

HireMO Terms of Use

1. Acceptance and Changes

2. A No-Cost Public Workforce Service

3. Eligibility, Youth, and Authority

4. Accounts and Security

5. Accuracy Attestation and Program Information

6. Job Seeker Terms

7. Employer Terms

8. Assessments and Matching

9. Artificial Intelligence Features

10. Public Records and Required Notices

11. User Content and Permissions

12. Acceptable Use

13. Intellectual Property and Government Marks

14. Other Users and Third-Party Services

15. Electronic Communications

16. Suspension, Termination, and Records

17. Disclaimers

18. Limitation of Liability and Sovereign Immunity

19. Employer Indemnification

20. Governing Law and General Terms

21. Contact, Accessibility, and Complaints