Lead Azure Engineer

EPAM Systems; Brasil; Remote; BRL 180,000 - 280,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off and sick leave

Upskilling and certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems seeks a Lead Azure Engineer to drive secure cloud solutions across the enterprise, focusing on Microsoft Azure, Entra ID, and identity-based security. You will collaborate with cross-functional teams to ensure seamless authentication, authorization, and API integration across the enterprise ecosystem.

Responsibilities include designing secure Azure deployments, configuring Entra ID components, managing API permissions and IAM practices, and mentoring teams on cloud and security best

Qualifications

• 5+ years of hands-on experience with Microsoft Azure cloud services and security.
• 1+ year of leadership experience.
• Expertise in Microsoft Entra ID (App Registrations, Enterprise Applications, Service Principals).
• Proficiency in configuring API Permissions, Managed Identities, and Conditional Access.
• Strong knowledge of OAuth 2.0 and OpenID Connect flows.
• Experience integrating enterprise applications and APIs with Entra ID.
• Ability to troubleshoot authentication, authorization, token, and integration issues.
• Understanding of secure API access and identity-based security principles.
• Experience collaborating with application, security, architecture, and infrastructure teams.

Responsibilities

• Lead the design and implementation of secure Azure cloud solutions across the enterprise.
• Manage and configure Microsoft Entra ID components, including App Registrations, Enterprise Applications, and Service Principals.
• Integrate enterprise applications and APIs with Microsoft Entra ID.
• Configure and maintain API Permissions, Managed Identities, and Conditional Access policies.
• Troubleshoot authentication, authorization, token, and integration issues.
• Ensure secure API access and enforce identity-based security standards.
• Collaborate with cross-functional teams to deliver cohesive cloud identity solutions.
• Provide technical leadership and mentorship on cloud and identity best practices.

Skills

Azure

Leadership

IAM

OAuth 2.0

OpenID Connect

API Security

Cosmos DB

JWT

MFA

RBAC

Entra ID

Tools

Azure CLI

Azure Portal

Terraform

Postman

Job description

We are seeking a highly skilled Lead Azure Engineer to drive the design, integration, and security of enterprise cloud solutions. In this role, you will leverage your deep expertise in Microsoft Azure and identity platforms to deliver secure, scalable, and robust applications. You will collaborate closely with cross-functional teams to ensure seamless authentication, authorization, and integration across the enterprise ecosystem.ResponsibilitiesLead the design and implementation of secure Azure cloud solutions across the enterpriseManage and configure Microsoft Entra ID components, including App Registrations, Enterprise Applications, and Service PrincipalsIntegrate enterprise applications and APIs with Microsoft Entra IDConfigure and maintain API Permissions, Managed Identities, and Conditional Access policiesTroubleshoot authentication, authorization, token, and integration issuesEnsure secure API access and enforce identity-based security standardsCollaborate with application, security, architecture, and infrastructure teams to deliver cohesive solutionsSupport and optimize Azure Cosmos DB implementationsProvide technical leadership and mentorship on cloud and identity best practicesRequirements5+ years of hands-on experience with Microsoft Azure cloud services and securityAt least 1 year of relevant leadership experienceExpertise in Microsoft Entra ID, including App Registrations, Enterprise Applications, and Service PrincipalsProficiency in configuring API Permissions, Managed Identities, and Conditional AccessStrong understanding of OAuth 2.0 authentication and authorization flows, including Authorization Code and Client CredentialsKnowledge of OpenID Connect (OIDC), including ID tokens, access tokens, scopes, claims, and JWTBackground in integrating enterprise applications and APIs with Microsoft Entra IDCapability to troubleshoot authentication, authorization, token, and integration issuesUnderstanding of secure API access and identity-based security principlesExperience collaborating with application, security, architecture, and infrastructure teamsFamiliarity with Azure Cosmos DBExcellent command of written and spoken English (B2+ level)Nice to haveSkills in designing and implementing enterprise Identity and Access Management (IAM) solutionsExpertise in IAM concepts, including authentication, authorization, and SSOCompetency in MFA, RBAC, and identity lifecycle managementWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.