Senior DevOps Engineer

EPAM Systems; Toronto; Remote; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Healthcare benefits

Employee financial programs

Paid time off and sick leave

Upskilling and certification courses

LinkedIn Learning access

Global career opportunities

Volunteer and community involvement

Job summary

EPAM Systems Inc. is seeking a Senior DevOps Engineer to operate as a one-person DevOps practice for a multi-tenant SaaS platform across LATAM, Canada, and the US.

You will manage Azure services, maintain AKS-hosted agents, and drive CI/CD pipelines using ARM templates and PowerShell across dev, demo, UAT, and prod environments. You will troubleshoot incidents with Application Insights, Kusto, and Kudu, coordinate changes in ServiceNow, and oversee FinOps for tenant-level cost allocation.

Qualifications

• 3+ years in a DevOps role supporting production SaaS platforms.
• Proven Azure services expertise (App Services, Application Gateway, WAF, Firewall).
• Experience with Azure Key Vault, Blob Storage, DNS, Application Insights, and Log Analytics.
• Strong AKS administration and self-hosted build agent management.
• Proficient with ARM templates and PowerShell for IaC.
• Background in Azure DevOps YAML pipelines and GitHub repo management.
• Incident analysis using Kusto and Kudu.
• Understanding of DNS/TCP/TLS/HTTP for third-party integrations.
• Familiar with ServiceNow change management and FinOps concepts.
• Security tooling experience (Wiz, Invicti, SailPoint) and privileged access management.

Responsibilities

• Operate a one-person DevOps practice for a multi-tenant SaaS platform.
• Manage Azure services including App Services, Application Gateway, and Key Vault.
• Maintain AKS-hosted build agents and CI/CD pipelines across multiple environments.
• Deliver IaC via ARM templates and PowerShell in centralized templates.
• Troubleshoot pipeline failures and mitigate throttling; investigate incidents.
• Coordinate changes using ServiceNow CHG records and task plans.
• Oversee FinOps including per-tenant cost allocation and capacity sizing.
• Assist security and vendor requests (e.g., egress rules, whitelisting, DAST).

Skills

Azure

AKS administration

Azure DevOps

GitHub

ARM templates

PowerShell

Kusto

Kudu diagnostics

DNS/TLS/HTTP debugging

WAF/Firewall management

ServiceNow CHG

FinOps/cost allocation

SailPoint/Privileged access

CI/CD pipelines

Tools

Azure DevOps

GitHub

Kusto

Kudu

Arm templates

PowerShell

AKS

ServiceNow

Wiz/Invicti/SailPoint

Job description

We are seeking a Senior DevOps Engineer to operate as a one-person DevOps practice supporting a multi-tenant SaaS platform for insurance and financial services across LATAM, Canada and the US. The platform consists of around 18 .NET microservices with an Angular SSR front end, backed by Azure SQL, Azure Data Factory and webMethods for partner SOAP integrations, running across dev/demo/UAT/prod environments in a primary and a DR region, while supporting five teams of 30+ developers.ResponsibilitiesManage Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights and Log AnalyticsMaintain AKS-hosted self-hosted build agents to support CI/CD operationsDeliver Infrastructure as Code using ARM templates and PowerShell through shared central pipeline templates used across approximately 20 repositoriesBuild and maintain Azure DevOps YAML pipelines, manage GitHub repositories, rulesets and branch policies following the ADO-to-GitHub migrationTroubleshoot pipeline failures and mitigate throttling issuesInvestigate production incidents using Application Insights, Kusto and Kudu diagnosticsDiagnose third-party integration issues across DNS, TCP, TLS, HTTP and authentication layers with insurers and banks, including egress and whitelisting requests and vendor escalationsCoordinate change management through ServiceNow CHG records, implementation plans and TCS task coordinationTrack VM vulnerability remediation with TCS based on Wiz findings and triage Invicti DAST results and WAF block investigationsComplete client security questionnaires and manage SailPoint access recertification along with PIM/Entra privileged accessOversee FinOps activities including Azure cost allocation per tenant and line of business, capacity sizing for large client onboardings and infrastructure budget inputSupport developer enablement through access requests, app settings propagation across environments and configuration drift detectionRequirements3+ years of experience in a DevOps role supporting production SaaS platformsExpertise in Azure services such as App Services, Application Gateway, WAF and Azure FirewallProficiency in Azure Key Vault, Blob Storage, Azure DNS, Application Insights and Log AnalyticsSkills in AKS administration and managing self-hosted build agentsKnowledge of Infrastructure as Code using ARM templates and PowerShellBackground in Azure DevOps YAML pipelines and GitHub repository management, rulesets and branch policiesCompetency in incident investigation using Kusto and Kudu diagnosticsUnderstanding of layered connectivity diagnostics (DNS, TCP, TLS, HTTP, auth) for third-party integrationsFamiliarity with ServiceNow change management processesQualifications in security and compliance tools such as Wiz, Invicti DAST and SailPointCapability to manage FinOps activities including cost allocation and capacity sizingFlexibility to use GitHub Copilot CLI agents and skills for DevOps automation workflowsProficiency in English at a B2+ levelWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedIn