Remote AWS DevSecOps Architect Lead

Cognizant; Boston (MA); Remote; USD 114,000 - 128,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Paid Time Off

401(k) Plan

Disability

Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Cloud Lead with AWS DevSecOps expertise to design, implement, and optimize scalable cloud infrastructure, CI/CD pipelines, and secure deployment frameworks in a remote US role.

You will lead GitLab-based pipelines, IaC with Terraform and AWS CDK, container platforms (ECS/EKS), and ensure security, compliance, and observability across multi-account, multi-region environments.

Qualifications

• Extensive experience with AWS Cloud services (10+ years preferred).
• Strong hands-on expertise in Terraform and AWS CDK.
• Experience with GitLab CI/CD and pipeline automation.
• Solid experience with container platforms (ECS/EKS, Kubernetes).
• Proficiency in DevSecOps tools and security integration.

Responsibilities

• Design and implement robust GitLab CI/CD pipelines using multi-stage YAML for build, testing, security scanning, and multi-environment deployments.
• Configure and manage GitLab Runners (EC2/EKS-based autoscaling) with focus on scalability, performance, and security.
• Optimize pipeline performance through parallel execution, caching, artifact reuse, and conditional workflows.
• Implement automated release management including tagging, semantic versioning, rollback strategies, and audit traceability.
• Develop Infrastructure as Code (IaC) using Terraform and AWS CDK (TypeScript/Python) with modular and reusable design patterns.
• Automate provisioning of AWS services such as VPC, IAM, EC2, ECS/EKS, Lambda, RDS, and S3 using parameterized templates.
• Build and manage multi-account and multi-region AWS environments using CDK pipelines and GitLab integration.
• Implement scalable and resilient deployment strategies including blue/green, canary, and rolling deployments.
• Automate deployment of applications to container platforms (ECS/EKS), including image build pipelines and runtime configuration.
• Manage Kubernetes deployments using Helm charts and establish repeatable deployment standards.
• Implement container lifecycle management and registry governance using GitLab Registry and Amazon ECR.
• Integrate security controls within CI/CD pipelines including SAST, DAST, dependency scanning, container scanning, and secrets detection.
• Enforce least-privilege access by designing IAM roles, policies, and cross-account access controls.
• Implement secure configuration and secrets management using AWS Secrets Manager, SSM Parameter Store, and CI/CD variables.
• Enable compliance reporting aligned to PCI DSS, SOC 2, GDPR, and CIS benchmarks.
• Design and implement end-to-end observability frameworks using AWS CloudWatch (logs, metrics, alarms).
• Integrate third-party monitoring tools such as Datadog, Dynatrace, Splunk, or Grafana.
• Build centralized logging architecture with CloudWatch, CloudTrail, and S3 archival and retention policies.
• Develop custom CloudWatch dashboards with dynamic filtering and service correlation views.
• Configure advanced alerting mechanisms including composite alarms, anomaly detection, and threshold tuning.
• Enable cross-account observability using AWS Organizations and centralized monitoring accounts.
• Troubleshoot and resolve issues across CI/CD pipelines, infrastructure, networking, IAM, and runtime environments.
• Perform drift detection and remediation in infrastructure and deployments.
• Ensure high availability, scalability, and reliability of cloud environments through proactive monitoring and optimization.

Skills

AWS Cloud

Terraform

AWS CDK

GitLab CI/CD

Container platforms

Kubernetes

DevSecOps

Security integration

Observability

Python/TypeScript

Tools

GitLab

Terraform

AWS CDK

Kubernetes

Datadog

Splunk

Grafana

Job description

Cognizant is seeking a Cloud Lead with AWS DevSecOps expertise to design, implement, and optimize scalable cloud infrastructure, CI/CD pipelines, and secure deployment frameworks in a remote US role.

You will lead GitLab-based pipelines, IaC with Terraform and AWS CDK, container platforms (ECS/EKS), and ensure security, compliance, and observability across multi-account, multi-region environments.