Senior Cloud Engineer (AWS)

EPAM Systems; Brasil; Presencial; BRL 180 000 - 340 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Healthcare benefits

Paid time off

Upskilling and certifications

LinkedIn Learning access

Global career opportunities

Volunteer opportunities

EPAM Employee Groups

Award-winning culture

Resumo da oferta

EPAM Systems is seeking a Senior Cloud Engineer to build and evolve secure, scalable cloud environments that support enterprise-grade initiatives. You will work with cross-functional teams to advance security, automation, and AI-driven engineering approaches.

You will deploy Terraform/Terragrunt infrastructure, configure AWS/Azure networking, and integrate Entra ID/AD for identity management while mentoring engineers and driving CI/CD automation and DevSecOps practices.

Qualificações

• 3+ years of professional cloud engineering experience
• Strong IaC delivery background with Terraform/Teragrunt
• Hands-on with AWS Networking (Cloud WAN, Transit Gateway, Network Firewall) and Azure Networking
• Experience with HashiCorp Boundary or similar enterprise access platforms
• Identity management with Microsoft Entra ID and Active Directory
• Automation and tooling using Python; Linux and Docker knowledge
• DevSecOps practices including SAST, SCA, and secrets management
• CI/CD automation for build, test, and deployment pipelines
• Leadership skills and ability to mentor engineers
• Proficiency with AI-assisted development tools (Claude Code, Copilot) and prompt engineering

Responsabilidades

• Deploy HashiCorp Boundary controllers, workers, and access model for secure infra access
• Build and maintain Terraform/Terragrunt infrastructure for IaC delivery
• Configure AWS and Azure networking for secure connectivity
• Integrate Microsoft Entra ID and Active Directory for identity management
• Contribute to CI/CD automation and operational tooling improvements
• Advance DevSecOps, security and compliance across the environment
• Document implementation patterns and operational procedures
• Promote AI-assisted engineering practices across development and ops teams

Conhecimentos

Cloud engineering

Infrastructure as Code

Python

Linux

CI/CD

Leadership

English communication (B2)

Ferramentas

Terraform

Terragrunt

Boundary

AWS Networking

Azure Networking

Entra ID

Active Directory

GitHub Actions

Claude Code

GitHub Copilot

Descrição da oferta de emprego

We are looking for a Senior Cloud Engineer to join our team.

In this role, you will contribute to building and evolving secure, scalable cloud environments that support enterprise-grade initiatives. You will work closely with cross-functional teams to bring modern infrastructure practices to life while advancing security, automation, and AI-driven engineering approaches.

Responsibilities

• Deploy HashiCorp Boundary controllers, workers, and the associated access model to enable secure infrastructure access
• Build and maintain Terraform and Terragrunt infrastructure for consistent infrastructure-as-code delivery
• Configure AWS and Azure networking to establish secure connectivity across the platform
• Implement integration with Microsoft Entra ID and Active Directory for enterprise identity management
• Contribute to CI/CD automation efforts and support operational tooling improvements
• Advance DevSecOps, security, and compliance practices across the environment
• Document implementation patterns and operational procedures to support knowledge sharing
• Promote AI-assisted engineering practices across development and operational activities

Requirements

• At least 3 years of professional relevant experience in cloud engineering
• Strong hands-on background in Infrastructure as Code delivery
• Practical experience with Terraform and Terragrunt for infrastructure automation
• Applied knowledge of AWS Networking, including Cloud WAN, Transit Gateway, and Network Firewall
• Hands-on experience with Azure Networking for enterprise-scale connectivity
• Working experience with HashiCorp Boundary or similar enterprise access platforms
• Practical knowledge of Microsoft Entra ID and Active Directory for identity management
• Confident use of Python for automation and tooling tasks
• Working knowledge of Linux operating systems and Docker for containerised workloads
• Background in DevSecOps practices, including SAST, SCA, and Secrets Management
• Solid experience with CI/CD automation for build, test, and deployment pipelines
• Strong technical leadership skills and the ability to mentor other engineers
• Ownership mindset combined with a collaborative approach to teamwork
• Daily use of Claude Code and/or GitHub Copilot for AI-assisted development
• Understanding of AI-assisted software development principles
• Familiarity with prompt engineering and LLM fundamentals
• Practical experience integrating AI into engineering workflows
• Confident English communication at B2 level or higher, in both written and spoken forms

Nice to have

• Experience with Microsoft Entra ID OIDC integration for federated authentication
• Familiarity with ExpressRoute for private network connectivity to Azure
• Background with Enterprise PAM or Zero Trust platforms for privileged access management
• Hands-on experience with GitHub Actions for CI/CD workflows
• Awareness of MCP servers and AI automation tooling for advanced AI-enabled workflows

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.