Lead Azure Engineer

EPAM Systems; Colombia; On-site; COP 180,000,000 - 300,000,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling & certs

Global career opportunities

LinkedIn Learning access

Job summary

EPAM Systems is seeking a Lead Azure Engineer to drive design, integration, and security of enterprise cloud solutions. You will leverage Microsoft Azure and Entra ID expertise to deliver secure, scalable applications across the enterprise.

You will collaborate with cross-functional teams to ensure seamless authentication, authorization, and API integration, while mentoring junior engineers and upholding security best practices in a global delivery environment.

Qualifications

• 5+ years of hands-on experience with Microsoft Azure cloud services and security.
• At least 1 year of leadership experience.
• Expertise in Microsoft Entra ID, including App Registrations, Enterprise Applications, and Service Principals.
• Proficiency in configuring API Permissions, Managed Identities, and Conditional Access.
• Strong understanding of OAuth 2.0 authentication and authorization flows, including Authorization Code and Client Credentials.
• Knowledge of OpenID Connect (OIDC), including ID tokens, access tokens, scopes, claims, and JWT.
• Background in integrating enterprise applications and APIs with Microsoft Entra ID.
• Capability to troubleshoot authentication, authorization, token, and integration issues.
• Understanding of secure API access and identity-based security principles.
• Experience collaborating with application, security, architecture, and infrastructure teams.
• Familiarity with Azure Cosmos DB.
• Excellent command of written and spoken English (B2+ level).

Responsibilities

• Lead the design and implementation of secure Azure cloud solutions across the enterprise.
• Manage and configure Microsoft Entra ID components, including App Registrations, Enterprise Applications, and Service Principals.
• Integrate enterprise applications and APIs with Microsoft Entra ID.
• Configure and maintain API Permissions, Managed Identities, and Conditional Access policies.
• Troubleshoot authentication, authorization, token, and integration issues.
• Ensure secure API access and enforce identity-based security standards.
• Collaborate with application, security, architecture, and infrastructure teams to deliver cohesive solutions.
• Support and optimize Azure Cosmos DB implementations.
• Provide technical leadership and mentorship on cloud and identity best practices.

Skills

Azure cloud

Identity security

OAuth 2.0

OpenID Connect

Entra ID

Leadership

API permissions

JWT / tokens

Tools

Azure Cosmos DB

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are seeking a highly skilled Lead Azure Engineer to drive the design, integration, and security of enterprise cloud solutions. In this role, you will leverage your deep expertise in Microsoft Azure and identity platforms to deliver secure, scalable, and robust applications. You will collaborate closely with cross-functional teams to ensure seamless authentication, authorization, and integration across the enterprise ecosystem.

Responsibilities

• Lead the design and implementation of secure Azure cloud solutions across the enterprise
• Manage and configure Microsoft Entra ID components, including App Registrations, Enterprise Applications, and Service Principals
• Integrate enterprise applications and APIs with Microsoft Entra ID
• Configure and maintain API Permissions, Managed Identities, and Conditional Access policies
• Troubleshoot authentication, authorization, token, and integration issues
• Ensure secure API access and enforce identity-based security standards
• Collaborate with application, security, architecture, and infrastructure teams to deliver cohesive solutions
• Support and optimize Azure Cosmos DB implementations
• Provide technical leadership and mentorship on cloud and identity best practices

Requirements

• 5+ years of hands-on experience with Microsoft Azure cloud services and security
• At least 1 year of relevant leadership experience
• Expertise in Microsoft Entra ID, including App Registrations, Enterprise Applications, and Service Principals
• Proficiency in configuring API Permissions, Managed Identities, and Conditional Access
• Strong understanding of OAuth 2.0 authentication and authorization flows, including Authorization Code and Client Credentials
• Knowledge of OpenID Connect (OIDC), including ID tokens, access tokens, scopes, claims, and JWT
• Background in integrating enterprise applications and APIs with Microsoft Entra ID
• Capability to troubleshoot authentication, authorization, token, and integration issues
• Understanding of secure API access and identity-based security principles
• Experience collaborating with application, security, architecture, and infrastructure teams
• Familiarity with Azure Cosmos DB
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Skills in designing and implementing enterprise Identity and Access Management (IAM) solutions
• Expertise in IAM concepts, including authentication, authorization, and SSO
• Competency in MFA, RBAC, and identity lifecycle management

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.