Senior DevSecOps Engineer — Terraform, AWS & Secure CI/CD

Cognizant; Richmond (VA); On-site; USD 100,000 - 155,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a DevSecOps Engineer to lead infrastructure-as-code initiatives, build secure CI/CD pipelines, and enforce least-privilege access across AWS resources. You will design Terraform modules, manage HCP Terraform workspaces, and integrate AI-assisted tooling within secure workflows.

Candidates should have extensive Terraform experience, AWS IAM expertise, and strong knowledge of secret management.

Qualifications

• 5+ years of hands-on Terraform experience including modules, state management and remote backends.
• Experience with HCP Terraform (Terraform Cloud) and VCS-driven workflows — workspace config, PR plans, run approvals.
• Experience with HCP Terraform private registry for internal modules.
• Strong understanding of AWS IAM — policies, roles, trust relationships, permissions, SCPs.
• Hands-on experience with at least one secrets management platform: Vault or AWS Secrets Manager.
• Solid understanding of OIDC and federated identity in CI/CD and cloud access.
• Proven experience building CI/CD pipelines in GitHub Actions or GitLab CI/CD with environment promotion gates.
• Security-first mindset with tight permission scoping and justification.
• Experience using AI coding assistants and knowing when to trust or verify AI output.
• Commitment to human-in-the-loop practices and production-grade approval gates.

Responsibilities

• Design, build, and maintain reusable Terraform modules with clear interfaces and documentation.
• Manage HCP Terraform workspaces using VCS-driven workflows, including workspace design and policy enforcement.
• Provision and manage AWS resources following least-privilege access and security best practices.
• Manage secrets with Vault or AWS Secrets Manager.
• Build and maintain CI/CD pipelines (GitHub Actions) with gating, testing, and promotion workflows integrated with HCP Terraform.
• Conduct security reviews of infrastructure code and pipeline configurations.

Skills

Terraform

HCP Terraform

AWS IAM

Secrets Management

OIDC Federated Identity

CI/CD Pipelines

GitHub Actions

GitLab CI/CD

AI Coding Assistants

Security Best Practices

Tools

HashiCorp Vault

AWS Secrets Manager

Terraform Cloud

Job description

Cognizant is seeking a DevSecOps Engineer to lead infrastructure-as-code initiatives, build secure CI/CD pipelines, and enforce least-privilege access across AWS resources. You will design Terraform modules, manage HCP Terraform workspaces, and integrate AI-assisted tooling within secure workflows.

Candidates should have extensive Terraform experience, AWS IAM expertise, and strong knowledge of secret management.