DevOps Platform Engineering Lead

About the role As a DevOps Platform Engineering Lead, you will help establish an AWS Cloud Center of Excellence and support the shift from traditional ticket‑based operations to a product‑led platform engineering model. You will design secure, reusable cloud patterns, self‑service capabilities, CI/CD standards, and automation frameworks that help developer teams move faster while maintaining enterprise standards for security, scalability, reliability, and cost efficiency. You will be a valued member of the Cloud Infrastructure and Security team, working closely with application teams, security engineers, and cloud architects.

In this role, you will Lead the design and build‑out of the AWS Cloud Center of Excellence, helping shift cloud operations from a ticket‑based model to a product‑led platform engineering model. Define the platform strategy, standards, and reusable patterns that enable development teams to provision secure, scalable, and cost‑efficient cloud infrastructure. Design and deliver the top 3 to 5 golden paths for common application and infrastructure patterns, including Kubernetes, serverless, and VM‑based workloads.

Create reusable Infrastructure as Code templates using Terraform and/or Ansible, with embedded standards for security, networking, monitoring, tagging, and governance. Build standardized networking templates, including subnets, routing tables, security groups, endpoints, NAT gateways, and firewall patterns. Automate the creation of golden images, including AMI standards, EC2 Image Builder pipelines, OS hardening, vulnerability scanning, and image lifecycle controls.

Establish Kubernetes and serverless platform foundations for modern application hosting, including Amazon EKS and/or Azure AKS. Define Kubernetes platform baselines, including private endpoints, RBAC/AD integration, node pools, autoscaling, encryption at rest, audit logging, security controls, and monitoring. Create container standards, including Dockerfile baselines, container base image strategies, vulnerability scanning, SBOM generation, image signing, and promotion gates.

Define infrastructure image management standards, including base OS images, application‑specific images, patching cadence, deprecation policies, and CVE response SLAs. Define CI/CD standards for infrastructure provisioning and application deployment, including branching strategy, pull request standards, approval gates, automated testing, rollback patterns, and artifact management. Implement policy‑as‑code controls using tools such as OPA, Conftest, Sentinel, Azure Policy, or AWS Service Control Policies.

Create self‑service platform capabilities using tools such as Backstage and/or ServiceNow so developers can access approved templates, tools, and platform services. Partner with application, infrastructure, security, and architecture teams to drive adoption of AWS DevOps, DevSecOps, and platform engineering standards. Work model We strive to provide flexibility wherever possible.

Based on this role’s business requirements, this is a remote position open to qualified applicants in Charlotte, NC. Regardless of your working arrangement, we are here to support a healthy work‑life balance through our various wellbeing programs. The working arrangements for this role are accurate as of the date of posting.

This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured, we will always be clear about role expectations. What you need to have to be considered 8+ years of experience in AWS DevOps, DevSecOps, platform engineering, cloud architecture, or infrastructure automation, with experience defining standards or leading platform engineering initiatives.

Proficiency with Amazon Kubernetes Services, including Amazon EKS. Deep knowledge of DevSecOps practices, including security automation, vulnerability scanning, policy enforcement, compliance checks, and secure deployment patterns. Proven background designing and implementing CI/CD standards, including pipeline design, branching strategies, approval workflows, release promotion, and rollback approaches.

Hands‑on proficiency with Ansible and/or Terraform for Infrastructure as Code. Strong experience with AWS DevOps, including cloud automation, infrastructure provisioning, deployment automation, monitoring, and governance. Proficiency with GitHub, including repository standards, pull request practices, code owners, approval rules, and CI/CD integration.

Experience creating golden paths, reusable templates, standardized networking patterns, golden images, and self‑service platform capabilities. Knowledge of infrastructure image management, including AMIs, EC2 Image Builder pipelines, patching standards, vulnerability scanning, and image lifecycle controls. Background with Kubernetes and serverless hosting patterns, including security, monitoring, scalability, and operational controls.

Working knowledge of containerization, Docker, container base images, and artifact repositories such as ECR, ACR, Artifactory, or similar platforms. Strong understanding of cloud networking patterns, including subnets, routing tables, security groups, endpoints, NAT gateways, firewall patterns, and private connectivity. Ability to partner with cross‑functional teams to define standards, drive adoption, and support a product‑led platform engineering model.

These will help you stand out Background in helping establish or mature an AWS Cloud Center of Excellence. Exposure to building internal developer platforms or self‑service platform capabilities. Experience with Backstage and/or ServiceNow.

Working knowledge of policy‑as‑code tools such as OPA, Conftest, Sentinel, Azure Policy, or AWS Service Control Policies. Experience with SBOM generation, image signing, artifact promotion, and software supply chain security. Familiarity with blue/green deployments, canary releases, progressive delivery, Argo Rollouts, Flagger, or feature flag strategies.

Experience supporting Kubernetes, serverless, and VM‑based application patterns. Experience creating documentation, reference architectures, starter templates, and developer enablement materials. We're excited to meet people who share our mission and can make an impact in a variety of ways.

Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role. Salary and Other Compensation Applications will be accepted until May 25, 2026.

The annual salary for this position is between $114,000 - $133,500 depending on experience and other qualifications of the successful candidate. This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans. Benefits Medical/Dental/Vision/Life Insurance Paid holidays plus Paid Time Off 401(k) plan and contributions Long‑term/Short‑term Disability Paid Parental Leave Employee Stock Purchase Plan Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting.

Cognizant reserves the right to modify this information at any time, subject to applicable law. Please note, this role is not able to offer visa transfer or sponsorship now or in the future. Cognizant is an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. #J-18808-Ljbffr