AWS Cloud Architect - Networking & Observability

Cloud Networking

• Design multi-VPC architectures with optimized CIDR allocation across AWS accounts and regions.
• Implement hub-and-spoke architectures using AWS Transit Gateway and Cloud WAN with route segmentation and propagation controls.
• Configure hybrid connectivity using AWS Direct Connect (Private VIFs, LAGs) and VPN failover solutions.
• Engineer highly available NAT Gateway and egress routing architectures.
• Implement advanced Route 53 configurations including split-horizon DNS, private hosted zones, and conditional forwarding.
• Design inter-VPC connectivity using VPC Peering, Transit Gateway, and VPC Lattice.
• Implement AWS PrivateLink and Network Firewall solutions to enable secure connectivity and traffic inspection.

Observability & Monitoring

• Implement CloudWatch metrics, logs, dashboards, alarms, and Logs Insights queries.
• Build distributed tracing solutions using AWS X-Ray for microservices-based applications.
• Configure CloudTrail-based API observability and audit logging.
• Design centralized logging architectures with structured log ingestion, S3 archival, retention, and lifecycle policies.
• Develop dashboards with dynamic filtering, multi-service correlation, and multi-region visibility.
• Configure advanced alerting using anomaly detection, composite alarms, and threshold tuning.
• Enable cross-account observability using AWS Organizations and centralized monitoring accounts.

Compliance & Automation

• Configure tools to identify risks and support compliance audits.
• Develop automated reporting for PCI DSS, SOC 2, GDPR, and CIS compliance requirements.
• Implement CI/CD-driven deployment of networking, monitoring, and observability configurations.
• Collaborate with security, platform, and DevOps teams to drive cloud governance and operational excellence.

• AWS X-Ray
• CloudWatch
• CloudTrail
• Route 53
• VPC Flow Logs
• Direct Connect
• VPC Lattice
• Cloud WAN
• Transit Gateway
• AWS Network Firewall
• AWS PrivateLink
• AWS Organizations
• Splunk / Datadog / Prometheus / Grafana, * 8-10+ years of IT experience with strong AWS cloud infrastructure and networking expertise.
• Hands-on experience designing enterprise-scale AWS networking solutions.
• Strong knowledge of DNS, routing, firewalls, VPNs, hybrid connectivity, and network segmentation.
• Experience building and managing enterprise observability and logging platforms.
• Experience supporting compliance frameworks such as PCI DSS, SOC 2, GDPR, and CIS.
• Experience with Infrastructure as Code (Terraform/CloudFormation) and CI/CD pipelines is preferred.

The annual salary for this position is between $79,240- $130,000 depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and is subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

· Medical/Dental/Vision/Life Insurance

· Paid holidays plus Paid Time Off

· 401(k) plan and contribution

· Long-term/Short-term Disability

· Paid Parental Leave

· Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.