Cloud Lead: AWS DevSecOps | Terraform & CDK | Remote

Cognizant; Topeka (KS); Remote; USD 114,000 - 128,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays & PTO

401(k) plan

Job summary

Cognizant is seeking a Cloud Lead with deep AWS DevSecOps expertise to design, implement, and optimize scalable cloud infrastructure, CI/CD pipelines, and secure deployment frameworks for enterprise environments.

You will lead multi-account AWS environments, implement blue/green canary and rolling deployments, and drive observability and security across pipelines and runtimes. A remote-US role with strong collaboration across teams is offered.

Qualifications

• Extensive experience with AWS Cloud services (10+ years preferred).
• Strong hands-on Terraform and AWS CDK.
• Experience with GitLab CI/CD and pipeline automation.
• Solid experience with container platforms (ECS/EKS, Kubernetes).
• Proficiency in DevSecOps tools and security integration.

Responsibilities

• Design and implement robust GitLab CI/CD pipelines using multi-stage YAML for build, testing, security scanning, and multi-environment deployments.
• Configure and manage GitLab Runners (EC2/EKS-based autoscaling) with focus on scalability, performance, and security.
• Optimize pipeline performance through parallel execution, caching, artifact reuse, and conditional workflows.
• Implement automated release management including tagging, semantic versioning, rollback strategies, and audit traceability.
• Develop Infrastructure as Code (IaC) using Terraform and AWS CDK (TypeScript/Python) with modular and reusable design patterns.
• Automate provisioning of AWS services such as VPC, IAM, EC2, ECS/EKS, Lambda, RDS, and S3 using parameterized templates.
• Build and manage multi-account and multi-region AWS environments using CDK pipelines and GitLab integration.
• Implement scalable and resilient deployment strategies including blue/green, canary, and rolling deployments.
• Automate deployment of applications to container platforms (ECS/EKS), including image build pipelines and runtime configuration.
• Manage Kubernetes deployments using Helm charts and establish repeatable deployment standards.
• Implement container lifecycle management and registry governance using GitLab Registry and Amazon ECR.
• Integrate security controls within CI/CD pipelines including SAST, DAST, dependency scanning, container scanning, and secrets detection.
• Enforce least-privilege access by designing IAM roles, policies, and cross-account access controls.
• Implement secure configuration and secrets management using AWS Secrets Manager, SSM Parameter Store, and CI/CD variables.
• Enable compliance reporting aligned to PCI DSS, SOC 2, GDPR, and CIS benchmarks.
• Design and implement end-to-end observability frameworks using AWS CloudWatch (logs, metrics, alarms).
• Integrate third-party monitoring tools such as Datadog, Dynatrace, Splunk, or Grafana.
• Build centralized logging architecture with CloudWatch, CloudTrail, and S3 archival and retention policies.
• Develop custom CloudWatch dashboards with dynamic filtering and service correlation views.
• Configure advanced alerting mechanisms including composite alarms, anomaly detection, and threshold tuning.
• Enable cross-account observability using AWS Organizations and centralized monitoring accounts.
• Troubleshoot and resolve issues across CI/CD pipelines, infrastructure, networking, IAM, and runtime environments.
• Perform drift detection and remediation in infrastructure and deployments.
• Ensure high availability, scalability, and reliability of cloud environments through proactive monitoring and optimization.

Skills

AWS Cloud services

Cloud architecture

Security practices

Tools

Terraform

AWS CDK

GitLab CI/CD

Kubernetes

Job description

Cognizant is seeking a Cloud Lead with deep AWS DevSecOps expertise to design, implement, and optimize scalable cloud infrastructure, CI/CD pipelines, and secure deployment frameworks for enterprise environments.

You will lead multi-account AWS environments, implement blue/green canary and rolling deployments, and drive observability and security across pipelines and runtimes. A remote-US role with strong collaboration across teams is offered.