> Markdown version of [/jobs/ext/2124884-aws-devsecops-cloud-lead](https://www.wearedevelopers.com/jobs/ext/2124884-aws-devsecops-cloud-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # AWS DevSecOps Cloud Lead - **Company:** Cognizant Technology Solutions Corporation - **Location:** Albany, NY, United States (Remote available) - **Experience:** Expert - **Salary:** $114,000.0 - $128,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Audit Trail, Cloud Computing, Cloud Engineering, Continuous Integration, Software Design Patterns, DevOps, Monitoring of Systems, Identity and Access Management, Python (Programming Language), Key Management, PCI Data Security Standards, Release Management, Cloud Services, TypeScript, Management of Software Versions, YAML, Datadog, AWS Cdk, Data Logging, Scripting, Cloud Platform System, DevOps Tools - Open-source, System Availability, Grafana, Software Security, Kubernetes Helm Charts, Amazon Virtual Private Cloud (VPC), Gitlab, Containerization, Gitlab-ci, Kubernetes, Deployment Automation, Performance Monitor, CIS Benchmarks, Cloudwatch, Terraform, Splunk, Dynatrace, Devsecops, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** August 19, 2026 - **Apply:** https://www.juju.com/job/00000000gnuq1m ## About the Role + Extensive experience with AWS Cloud services (10+ years preferred) + Strong hands-on expertise in Terraform and AWS CDK + Experience with GitLab CI/CD and pipeline automation + Solid experience with container platforms (ECS/EKS, Kubernetes) + Proficiency in DevSecOps tools and security integration Preferred Skills + Experience with multi-account AWS architecture and governance + Exposure to financial services regulatory environments + Strong scripting skills in Python or TypeScript + Experience with observability platforms (Datadog, Splunk, Dynatrace, Grafana) ## Description We are seeking a highly skilled Cloud Architect / Cloud Lead with deep expertise in AWS, DevOps, and DevSecOps practices. This role will be responsible for designing, implementing, and optimizing scalable cloud infrastructure, CI/CD pipelines, and secure deployment frameworks. The ideal candidate will bring strong experience in GitLab, Terraform, AWS CDK, and container platforms, along with a solid understanding of security, compliance, and observability in enterprise environments. Salary and Other Compensation: The annual salary for this position is between $114,000 to $128,000 depending on experience and other qualifications of the successful candidate. This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans. In this role, you will CI/CD & DevOps Engineering + Design and implement robust GitLab CI/CD pipelines using multi-stage YAML for build, testing, security scanning, and multi-environment deployments. + Configure and manage GitLab Runners (EC2/EKS-based autoscaling) with focus on scalability, performance, and security. + Optimize pipeline performance through parallel execution, caching, artifact reuse, and conditional workflows. + Implement automated release management including tagging, semantic versioning, rollback strategies, and audit traceability. Cloud Infrastructure & Automation + Develop Infrastructure as Code (IaC) using Terraform and AWS CDK (TypeScript/Python) with modular and reusable design patterns. + Automate provisioning of AWS services such as VPC, IAM, EC2, ECS/EKS, Lambda, RDS, and S3 using parameterized templates. + Build and manage multi-account and multi-region AWS environments using CDK pipelines and GitLab integration. + Implement scalable and resilient deployment strategies including blue/green, canary, and rolling deployments. Containerization & Platform Engineering + Automate deployment of applications to container platforms (ECS/EKS), including image build pipelines and runtime configuration. + Manage Kubernetes deployments using Helm charts and establish repeatable deployment standards. + Implement container lifecycle management and registry governance using GitLab Registry and Amazon ECR. DevSecOps & Compliance + Integrate security controls within CI/CD pipelines including SAST, DAST, dependency scanning, container scanning, and secrets detection. + Enforce least-privilege access by designing IAM roles, policies, and cross-account access controls. + Implement secure configuration and secrets management using AWS Secrets Manager, SSM Parameter Store, and CI/CD variables. + Enable compliance reporting aligned to PCI DSS, SOC 2, GDPR, and CIS benchmarks. Monitoring, Logging & Observability + Design and implement end-to-end observability frameworks using AWS CloudWatch (logs, metrics, alarms). + Integrate third-party monitoring tools such as Datadog, Dynatrace, Splunk, or Grafana. + Build centralized logging architecture with CloudWatch, CloudTrail, and S3 archival and retention policies. + Develop custom CloudWatch dashboards with dynamic filtering and service correlation views. + Configure advanced alerting mechanisms including composite alarms, anomaly detection, and threshold tuning. + Enable cross-account observability using AWS Organizations and centralized monitoring accounts. Operational Excellence & Troubleshooting + Troubleshoot and resolve issues across CI/CD pipelines, infrastructure, networking, IAM, and runtime environments. + Perform drift detection and remediation in infrastructure and deployments. + Ensure high availability, scalability, and reliability of cloud environments through proactive monitoring and optimization. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)