Job description

Senior DevOps Engineer / Terraform SME (AWS) Job Summary We are seeking a Senior DevOps Engineer with deep expertise in Terraform, HCP Terraform (Terraform Cloud), AWS security, and enterprise CI/CD automation. The ideal candidate will be a hands-on technical leader capable of driving Infrastructure-as-Code adoption, building secure cloud platforms, and leading DevOps workstreams in an enterprise AWS environment. The role requires strong technical depth, excellent communication skills, and the ability to work independently with customers and cross-functional engineering teams. Please note, this role is not able to offer visa transfer or sponsorship now or in the future* Responsibilities What You’ll Do Design build and maintain reusable Terraform modules with clear interfaces versioning and documentation so other teams can self-serve infrastructure safely • Manage and optimize HCP Terraform workspaces using VCS-driven workflows - including workspace design variable sets run triggers and policy enforcement • Provision and manage cloud resources (primarily AWS) following least-privilege access patterns and security best practices • Manage secrets and sensitive configuration using HashiCorp Vault and/or AWS Secrets Manager • Build and maintain CI/CD pipelines (GitHub Actions) with proper gating scanning testing and promotion workflows that integrate with HCP Terraform VCS-driven run model • Conduct security reviews of infrastructure code and pipeline configurations What You Bring Must Have • 5+ years of hands-on Terraform experience including writing modules with proper state management remote backends and provider configuration • Hands-on Experience with HCP Terraform (Terraform Cloud) specifically VCS-driven workflows - workspace configuration speculative plans on PRs run approvals and managing workspace variables/variable sets • Experience with HCP Terraform private registry for publishing and consuming internal modules • Strong understanding of AWS IAM - policies roles trust relationships permission boundaries and service control policies • Hands-on Experience with at least one secrets management platform: HashiCorp Vault or AWS Secrets Manager • Solid understanding of OIDC and federated identity -how trust is established token exchange and practical application in CI/CD and cloud access • Proven experience building and maintaining CI/CD pipelines in GitHub Actions or GitLab CI/CD including environment promotion approval gates and artifact management • Security-first mindset - you default to deny scope permissions tightly and can articulate why • Hands-on Experience using AI coding assistants (Amazon Q Kiro GitHub Copilot or similar) with a clear understanding of when to trust verify and override AI-generated output • Commitment to human-in-the-loop practices code review manual approval gates for production and treating AI output as a draft - never as the final word Nice to Have • Experience with Sentinel within HCP Terraform • Knowledge of infrastructure testing tools • Contributions to internal developer platforms or self-service infrastructure tooling Priority Skill Area Minimum Experience 1 Terraform & HCP Terraform (Terraform Cloud) 5+ Years 2 AWS Security, IAM & Secrets Management 5+ Years 3 CI/CD & DevOps Automation 4+ Years Applications will be accepted until 7/28/2026 The annual salary for this position is between $100,000- $155,000 depending on experience and other qualifications of the successful candidate. This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and is subject to the terms of Cognizant’s applicable plans. Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements: · Medical/Dental/Vision/Life Insurance · Paid holidays plus Paid Time Off · 401(k) plan and contribution · Long-term/Short-term Disability · Paid Parental Leave · Employee Stock Purchase Plan Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law. About Cognizant: Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant. Additional employment information Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law. Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview. Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws. If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email CareersNA2@cognizant.com for roles based in the Americas or CareersIndia2@cognizant.com for roles based in India.

Requirements

Must-haves

Senior DevOps Engineer / Terraform SME (AWS)
Please note, this role is not able to offer visa transfer or sponsorship now or in the future*
What You’ll Do
Design build and maintain reusable Terraform modules with clear interfaces versioning and documentation so other teams can self-serve infrastructure safely
Manage and optimize HCP Terraform workspaces using VCS-driven workflows - including workspace design variable sets run triggers and policy enforcement
Provision and manage cloud resources (primarily AWS) following least-privilege access patterns and security best practices
Manage secrets and sensitive configuration using HashiCorp Vault and/or AWS Secrets Manager
Build and maintain CI/CD pipelines (GitHub Actions) with proper gating scanning testing and promotion workflows that integrate with HCP Terraform VCS-driven run model
Conduct security reviews of infrastructure code and pipeline configurations
5+ years of hands-on Terraform experience including writing modules with proper state management remote backends and provider configuration
Hands-on Experience with HCP Terraform (Terraform Cloud) specifically VCS-driven workflows - workspace configuration speculative plans on PRs run approvals and managing workspace variables/variable sets
Experience with HCP Terraform private registry for publishing and consuming internal modules
Strong understanding of AWS IAM - policies roles trust relationships permission boundaries and service control policies
Hands-on Experience with at least one secrets management platform: HashiCorp Vault or AWS Secrets Manager
Solid understanding of OIDC and federated identity -how trust is established token exchange and practical application in CI/CD and cloud access
Proven experience building and maintaining CI/CD pipelines in GitHub Actions or GitLab CI/CD including environment promotion approval gates and artifact management
Security-first mindset - you default to deny scope permissions tightly and can articulate why
Hands-on Experience using AI coding assistants (Amazon Q Kiro GitHub Copilot or similar) with a clear understanding of when to trust verify and override AI-generated output
Commitment to human-in-the-loop practices code review manual approval gates for production and treating AI output as a draft - never as the final word
Terraform & HCP Terraform (Terraform Cloud)
AWS Security, IAM & Secrets Management

Nice-to-haves

Experience with Sentinel within HCP Terraform
Knowledge of infrastructure testing tools
Contributions to internal developer platforms or self-service infrastructure tooling

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsci/cdai

Platform: cognizant
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave