Senior DevSecOps Engineer: Terraform, CI/CD & AWS Security

Cognizant; Santa Fe (NM); On-site; USD 100,000 - 155,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays and Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a DevSecOps Engineer to lead infrastructure-as-code and CI/CD deliverables for the AIM project. You will design Terraform modules, enforce least-privilege, and run AI-assisted development tooling responsibly.

Responsibilities include building reusable Terraform modules, managing HCP Terraform workspaces, and securing cloud resources with vaults and policy controls. Strong emphasis on automation and security is required.

Qualifications

• 5+ years of hands-on Terraform experience including modules and remote backends.
• HCP Terraform (Terraform Cloud) with VCS-driven workflows, workspace config, and variables.
• Experience with HCP Terraform private registry for internal modules.
• Strong AWS IAM understanding: policies, roles, trust, SCPs.
• Secrets management: Vault or AWS Secrets Manager.
• OIDC and federated identity in CI/CD and cloud access.
• CI/CD pipelines in GitHub Actions or GitLab CI/CD with env promotion gates.
• Security-first mindset and least-privilege discipline.
• Experience with AI coding assistants and prudent trust/verify approach.
• Commitment to human-in-the-loop, code reviews, and production gates.

Responsibilities

• Design, build, and maintain Terraform modules with interfaces and documentation.
• Manage HCP Terraform workspaces and VCS-driven workflows; enforce policies.
• Provision and manage AWS resources with least-privilege practices.
• Manage secrets with Vault or AWS Secrets Manager.
• Build and maintain GitHub Actions pipelines with gating and testing.
• Conduct security reviews of infrastructure code and pipelines.

Skills

Terraform

HCP Terraform

AWS IAM

Secrets Management

OIDC

CI/CD

GitHub Actions

GitLab CI/CD

AI Coding Assistants

Human-in-the-Loop

Tools

HashiCorp Vault

AWS Secrets Manager

Terraform Cloud

Sentinel

HCP Terraform Registry

Job description

Cognizant is seeking a DevSecOps Engineer to lead infrastructure-as-code and CI/CD deliverables for the AIM project. You will design Terraform modules, enforce least-privilege, and run AI-assisted development tooling responsibly.

Responsibilities include building reusable Terraform modules, managing HCP Terraform workspaces, and securing cloud resources with vaults and policy controls. Strong emphasis on automation and security is required.