Senior DevOps Engineer

EPAM Systems; Brasil; Remote; BRL 150,000 - 230,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling & certification courses

LinkedIn Learning access

Job summary

EPAM Systems Inc. is seeking a Senior DevOps Engineer to operate as a one-person DevOps practice for a multi-tenant SaaS platform serving LATAM, Canada and the US.

The platform includes 18 .NET microservices with an Angular SSR frontend, backed by Azure SQL, Azure Data Factory, and webMethods for partner SOAP integrations, across multiple environments and both primary and DR regions. You will manage Azure services, AKS-hosted build agents, and infrastructure as code through ARM templates and

Qualifications

• 3+ years of experience as a DevOps engineer supporting production SaaS platforms.
• Experience with Azure services such as App Services, AKS, and networking.
• Proficiency with Infrastructure as Code using ARM templates and PowerShell.

Responsibilities

• Operate as the primary DevOps practitioner for a multi-tenant SaaS platform.
• Manage Azure services (App Services, Application Gateway, WAF, Firewall, Key Vault, Blob Storage, DNS, Insights, Log Analytics).
• Develop and maintain CI/CD pipelines using Azure DevOps YAML and GitHub workflows.
• Troubleshoot incidents using Kusto, Kudu, and Application Insights.

Skills

Azure DevOps

CI/CD pipelines

AKS

PowerShell

ARM Templates

GitHub

Kusto

Kudu diagnostics

WAF

SailPoint

Tools

Invicti DAST

Wiz

Job description

We are seeking a Senior DevOps Engineer to operate as a one-person DevOps practice supporting a multi-tenant SaaS platform for insurance and financial services across LATAM, Canada and the US. The platform consists of around 18 .NET microservices with an Angular SSR front end, backed by Azure SQL, Azure Data Factory and webMethods for partner SOAP integrations, running across dev/demo/UAT/prod environments in a primary and a DR region, while supporting five teams of 30+ developers.ResponsibilitiesManage Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights and Log AnalyticsMaintain AKS-hosted self-hosted build agents to support CI/CD operationsDeliver Infrastructure as Code using ARM templates and PowerShell through shared central pipeline templates used across approximately 20 repositoriesBuild and maintain Azure DevOps YAML pipelines, manage GitHub repositories, rulesets and branch policies following the ADO-to-GitHub migrationTroubleshoot pipeline failures and mitigate throttling issuesInvestigate production incidents using Application Insights, Kusto and Kudu diagnosticsDiagnose third-party integration issues across DNS, TCP, TLS, HTTP and authentication layers with insurers and banks, including egress and whitelisting requests and vendor escalationsCoordinate change management through ServiceNow CHG records, implementation plans and TCS task coordinationTrack VM vulnerability remediation with TCS based on Wiz findings and triage Invicti DAST results and WAF block investigationsComplete client security questionnaires and manage SailPoint access recertification along with PIM/Entra privileged accessOversee FinOps activities including Azure cost allocation per tenant and line of business, capacity sizing for large client onboardings and infrastructure budget inputSupport developer enablement through access requests, app settings propagation across environments and configuration drift detectionRequirements3+ years of experience in a DevOps role supporting production SaaS platformsExpertise in Azure services such as App Services, Application Gateway, WAF and Azure FirewallProficiency in Azure Key Vault, Blob Storage, Azure DNS, Application Insights and Log AnalyticsSkills in AKS administration and managing self-hosted build agentsKnowledge of Infrastructure as Code using ARM templates and PowerShellBackground in Azure DevOps YAML pipelines and GitHub repository management, rulesets and branch policiesCompetency in incident investigation using Kusto and Kudu diagnosticsUnderstanding of layered connectivity diagnostics (DNS, TCP, TLS, HTTP, auth) for third-party integrationsFamiliarity with ServiceNow change management processesQualifications in security and compliance tools such as Wiz, Invicti DAST and SailPointCapability to manage FinOps activities including cost allocation and capacity sizingFlexibility to use GitHub Copilot CLI agents and skills for DevOps automation workflowsProficiency in English at a B2+ levelWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.