Senior DevSecOps Engineer: Terraform & AWS Security

Cognizant; Charlotte (NC); On-site; USD 100,000 - 155,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Senior DevOps Engineer to lead Terraform and CI/CD initiatives in an enterprise AWS environment. You will design reusable Terraform modules, manage HCP Terraform workspaces, and enforce secure, automated pipelines using GitHub Actions.

A hands-on technical leader role with a security-first focus in a large-scale cloud setup. You will partner with cross-functional teams to implement least-privilege access, manage secrets with Vault or AWS Secrets Manager, and ensure robust

Qualifications

• 5+ years hands-on Terraform experience
• Hands-on experience with HCP Terraform (Terraform Cloud)
• Experience with HCP Terraform private registry
• Strong understanding of AWS IAM - policies, roles, trust relationships, and SCPs
• Hands-on experience with a secrets management platform (Vault or AWS Secrets Manager)
• Solid understanding of OIDC and federated identity in CI/CD and cloud access
• Proven experience building/maintaining CI/CD pipelines in GitHub Actions or GitLab CI/CD
• Security-first mindset with ability to articulate risk and least-privilege principles
• Experience using AI coding assistants with prudent trust/verification controls
• Commitment to human-in-the-loop practices and manual approvals for production

Responsibilities

• Design build and maintain reusable Terraform modules with clear interfaces, versioning and documentation so other teams can self-serve infrastructure safely
• Manage and optimize HCP Terraform workspaces using VCS-driven workflows, including workspace design, variable sets, run triggers and policy enforcement
• Provision and manage cloud resources (primarily AWS) following least-privilege access patterns and security best practices
• Manage secrets and sensitive configuration using HashiCorp Vault and/or AWS Secrets Manager
• Build and maintain CI/CD pipelines (GitHub Actions) with proper gating, scanning, testing and promotion workflows that integrate with HCP Terraform VCS-driven run model
• Conduct security reviews of infrastructure code and pipeline configurations

Skills

Terraform

HCP Terraform

AWS IAM

Secrets management

OIDC/federated identity

CI/CD automation

GitHub Actions

GitLab CI/CD

Security mindset

AI coding assistants

Tools

HashiCorp Vault

AWS Secrets Manager

Terraform Cloud

GitHub Actions

Job description

Cognizant is seeking a Senior DevOps Engineer to lead Terraform and CI/CD initiatives in an enterprise AWS environment. You will design reusable Terraform modules, manage HCP Terraform workspaces, and enforce secure, automated pipelines using GitHub Actions.

A hands-on technical leader role with a security-first focus in a large-scale cloud setup. You will partner with cross-functional teams to implement least-privilege access, manage secrets with Vault or AWS Secrets Manager, and ensure robust