Remote AWS Cloud Lead: DevSecOps & Infra Automation

Cognizant; Concord (NH); Remote; USD 114,000 - 128,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Cloud Lead with deep AWS DevSecOps expertise to design and optimize scalable cloud infrastructure, CI/CD pipelines, and secure deployment frameworks in a remote US context.

The role emphasizes Terraform, AWS CDK, GitLab, container platforms, and strong security/compliance; the candidate will implement multi-account, multi-region deployments and advanced observability.

Qualifications

• Extensive experience with AWS Cloud services.
• Strong hands-on expertise in Terraform and AWS CDK.
• Experience with GitLab CI/CD and pipeline automation.
• Solid experience with container platforms (ECS/EKS, Kubernetes).
• Proficiency in DevSecOps tools and security integration.

Responsibilities

• Design and implement GitLab CI/CD pipelines with multi-stage YAML for builds, tests, security scans, and multi-environment deployments.
• Configure and manage GitLab Runners (EC2/EKS-based autoscaling) with focus on scalability, performance, and security.
• Optimize pipeline performance through parallel execution, caching, artifact reuse, and conditional workflows.
• Implement automated release management including tagging, semantic versioning, rollback strategies, and audit traceability.
• Develop IaC using Terraform and AWS CDK (TypeScript/Python) with modular and reusable design patterns.
• Automate provisioning of AWS services such as VPC, IAM, EC2, ECS/EKS, Lambda, RDS, and S3 using parameterized templates.
• Build and manage multi-account and multi-region AWS environments using CDK pipelines and GitLab integration.
• Implement scalable and resilient deployment strategies including blue/green, canary, and rolling deployments.
• Automate deployment of applications to container platforms (ECS/EKS), including image build pipelines and runtime configuration.
• Manage Kubernetes deployments using Helm charts and establish repeatable deployment standards.
• Implement container lifecycle management and registry governance using GitLab Registry and Amazon ECR.
• Integrate security controls within CI/CD pipelines including SAST, DAST, dependency scanning, container scanning, and secrets detection.
• Enforce least-privilege access by designing IAM roles, policies, and cross-account access controls.
• Implement secure configuration and secrets management using AWS Secrets Manager, SSM Parameter Store, and CI/CD variables.
• Enable compliance reporting aligned to PCI DSS, SOC 2, GDPR, and CIS benchmarks.
• Design end-to-end observability using AWS CloudWatch (logs, metrics, alarms).
• Integrate third-party tools such as Datadog, Dynatrace, Splunk, or Grafana.
• Build centralized logging with CloudWatch, CloudTrail, and S3 retention.
• Develop custom CloudWatch dashboards with dynamic filtering and service correlation views.
• Configure advanced alerting including composite alarms, anomaly detection, and threshold tuning.
• Enable cross-account observability using AWS Organizations and centralized monitoring accounts.
• Troubleshoot issues across CI/CD pipelines, infrastructure, networking, IAM, and runtimes.
• Perform drift detection and remediation in infrastructure and deployments.
• Ensure high availability, scalability, and reliability of cloud environments through proactive monitoring.

Skills

AWS Cloud services

Terraform

AWS CDK

GitLab CI/CD

Container platforms

DevSecOps tools

Python/TypeScript

Multi-account AWS

Tools

GitLab

Terraform

AWS CDK

Job description

Cognizant is seeking a Cloud Lead with deep AWS DevSecOps expertise to design and optimize scalable cloud infrastructure, CI/CD pipelines, and secure deployment frameworks in a remote US context.

The role emphasizes Terraform, AWS CDK, GitLab, container platforms, and strong security/compliance; the candidate will implement multi-account, multi-region deployments and advanced observability.