You will be taken to Cognizant’s own careers page to apply. Job ID 00070153781.
Job description
Job Summary This cyber security architect role focuses on designing and optimizing secure internet access and remote connectivity solutions within a hybrid work model for a global organization. The architect should have network Security technologies such as Radware DDoS Reverse Proxy etc.
Responsibilities
Lead the onboarding of new protected assets configure traffic diversion (BGP or DNS) and manage GRE tunnels and scrubbing center routing.
Work alongside Radware Cyber Controller to ensure seamless operation of hybrid and always on DDoS models.Must have a good networking background and understanding
Knowledge of protocols BGP OSPF EIGRP SPT TRUNKS VLANs Experience with Wireshark or other protocol analysers
Oversee proxy operation activities by defining monitoring standards alerting thresholds and operational runbooks that enable rapid detection of anomalies and maintain high service availability and stability.
Provide expert guidance during cyber security incident management by analyzing proxy and VPN logs performing root cause assessments and coordinating containment and recovery actions that minimize business disruption.
Architect secure remote access solutions leveraging Cisco VPN to deliver resilient connectivity for a hybrid work model ensuring robust authentication strong encryption and compliant access to internal resources.
Implement reverse proxy tools to protect internet facing applications by enforcing strong access controls inspecting traffic and integrating with web application security measures that reduce risk of compromise.
Define security policies and configuration baselines for proxy platforms and cloud security gateways that comply with regulatory requirements and internal standards contributing to a consistent enterprise security posture.
Collaborate with infrastructure and application teams to integrate proxy services VPN solutions and cloud security platforms into existing network designs ensuring compatibility scalability and maintainability.
Establish detailed operational procedures for incident management including playbooks escalation paths and communication protocols that enable timely response and transparent reporting to stakeholders.
Evaluate emerging security threats and trends related to web access remote connectivity and cloud security to recommend architecture enhancements that improve resilience and support the organizations long term security strategy.
Document security architectures configurations and operational guidelines for proxy systems VPN platforms and incident workflows creating clear references that support knowledge sharing and future audits.
Coordinate security testing validation and continuous improvement initiatives for proxy environments and remote access solutions using metrics and feedback to refine controls and strengthen protection across the enterprise.
Qualifications 4 to 15 years hands on experience with Network Security appliances Lead the onboarding of new protected assets configure traffic diversion (BGP or DNS) and manage GRE tunnels and scrubbing center routing. Work alongside Radware Cyber Controller to ensure seamless operation of hybrid and always on DDoS models. Must have a good networking background and understanding Knowledge of protocols BGP OSPF EIGRP SPT TRUNKS VLANs Experience with Wireshark or other protocol analysers
Show strong proficiency in Cisco VPN technologies including configuration of secure tunnels user access policies and high availability designs that support hybrid work scenarios and remote users.
Apply advanced understanding of network security concepts web protocols and encryption technologies to design solutions that balance usability performance and protection.
Demonstrate effective communication and collaboration skills to work closely with cross functional teams translating technical risks and solutions into clear actionable guidance for diverse stakeholders.
Certifications Required Certified Information Systems Security Professional CISSP or equivalent vendor certification related to Zscaler or Cisco security technologies
