Senior DevSecOps Engineer - Terraform & Secure CI/CD Lead

Cognizant; Hartford (CT); On-site; USD 100,000 - 155,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a DevSecOps Engineer to lead infrastructure-as-code and CI/CD for the AIM project in Hartford, CT. You will design Terraform modules, drive secure pipelines, and enforce least-privilege access across cloud resources, with a focus on AI-assisted tooling governance.

Enhance security across infrastructure and pipelines by applying Vault/AWS Secrets Manager, OIDC federated identity, and tight approval gates in GitHub Actions or GitLab CI/CD.

Qualifications

• 5+ years of hands-on Terraform experience with modules and remote backends.
• Hands-on with HCP Terraform (Terraform Cloud) in VCS-driven workflows including PR plans and run approvals.
• Experience with HCP Terraform private registry for modules.
• Strong AWS IAM understanding (policies, roles, trust, SCPs).
• Hands-on with a secrets platform: Vault or AWS Secrets Manager.
• Knowledge of OIDC and federated identity in CI/CD and cloud access.
• Experience building CI/CD pipelines with GitHub Actions or GitLab CI/CD, with environment promotion and artifact management.
• Security-first mindset with tight permission scoping and auditable changes.
• Experience using AI coding assistants with governance controls.

Responsibilities

• Design, build, and maintain Terraform modules with clear interfaces and documentation for self-serve infrastructure.
• Manage HCP Terraform workspaces via VCS-driven workflows, including variable sets and run approvals.
• Provision and manage AWS resources following least-privilege access and security best practices.
• Manage secrets with Vault and/or AWS Secrets Manager.
• Build and maintain CI/CD pipelines (GitHub Actions) integrated with HCP Terraform workflows.
• Conduct security reviews of infrastructure code and pipeline configurations.

Skills

Terraform

HCP Terraform

AWS IAM

Secrets management

CI/CD

GitHub Actions

AI-assisted tooling

Security best practices

Code reviews

Tools

Terraform modules

Terraform Cloud

HashiCorp Vault

AWS Secrets Manager

GitHub Actions

GitLab CI/CD

Job description

Cognizant is seeking a DevSecOps Engineer to lead infrastructure-as-code and CI/CD for the AIM project in Hartford, CT. You will design Terraform modules, drive secure pipelines, and enforce least-privilege access across cloud resources, with a focus on AI-assisted tooling governance.

Enhance security across infrastructure and pipelines by applying Vault/AWS Secrets Manager, OIDC federated identity, and tight approval gates in GitHub Actions or GitLab CI/CD.