Senior DevOps Engineer

EPAM Systems; Colombia; Remote; COP 120,000,000 - 240,000,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling and certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems Inc in Colombia seeks a Senior DevOps Engineer to operate as a one-person DevOps practice for a multi-tenant SaaS platform serving LATAM, Canada and the US. The platform includes 18 .NET microservices with an Angular SSR frontend, backed by Azure SQL, Azure Data Factory and webMethods for partner SOAP integrations, across dev/demo/UAT/prod with a primary and DR region.

You will manage Azure services, AKS-based build agents, IaC via ARM templates/PowerShell, and pipelines in Azure

Qualifications

• 3+ years in a DevOps role supporting production SaaS platforms
• Expertise in Azure services (App Services, Gateway, WAF, Azure Firewall)
• Proficiency with Azure Key Vault, Blob Storage, DNS, Application Insights and Log Analytics
• Skills in AKS administration and self-hosted build agents
• IaC with ARM templates and PowerShell; Azure DevOps YAML pipelines
• GitHub repo management, rulesets and branch policies
• Incident investigation using Kusto and Kudu; diagnostics tooling
• Understanding of DNS/TCP/TLS/HTTP/auth for third-party integrations
• ServiceNow change management processes; change implementation planning
• FinOps cost allocation and capacity sizing across tenants

Responsibilities

• Operate as a one-person DevOps practice for a multi-tenant SaaS platform across LATAM, Canada, and the US
• Manage Azure services and AKS self-hosted build agents for CI/CD
• Deliver IaC using ARM templates and PowerShell through shared pipelines
• Build/maintain Azure DevOps YAML pipelines and GitHub repos with policies
• Troubleshoot CI/CD failures and throttling; diagnose production incidents
• Investigate third-party integration issues across DNS, TLS, HTTP, and auth layers
• Coordinate change management in ServiceNow; track CHG records and tasks
• Oversee FinOps activities including cost allocation and capacity planning
• Support developers with access, app settings propagation, and drift detection
• Collaborate with security tools (Wiz, Invicti DAST, SailPoint) and vendor escalations

Skills

DevOps experience

SaaS platforms

Incident investigation

Networking diagnostics

Change management

FinOps

English proficiency

Team collaboration

Tools

Azure App Services

Application Gateway

WAF

Azure Firewall

Key Vault

Blob Storage

Azure DNS

Application Insights

Log Analytics

AKS

CI/CD pipelines

ARM templates

PowerShell

Azure DevOps

GitHub

Kusto

Kudu

ServiceNow

Wiz

Invicti DAST

SailPoint

Job description

We are seeking a Senior DevOps Engineer to operate as a one-person DevOps practice supporting a multi-tenant SaaS platform for insurance and financial services across LATAM, Canada and the US. The platform consists of around 18 .NET microservices with an Angular SSR front end, backed by Azure SQL, Azure Data Factory and webMethods for partner SOAP integrations, running across dev/demo/UAT/prod environments in a primary and a DR region, while supporting five teams of 30+ developers.ResponsibilitiesManage Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights and Log AnalyticsMaintain AKS-hosted self-hosted build agents to support CI/CD operationsDeliver Infrastructure as Code using ARM templates and PowerShell through shared central pipeline templates used across approximately 20 repositoriesBuild and maintain Azure DevOps YAML pipelines, manage GitHub repositories, rulesets and branch policies following the ADO-to-GitHub migrationTroubleshoot pipeline failures and mitigate throttling issuesInvestigate production incidents using Application Insights, Kusto and Kudu diagnosticsDiagnose third-party integration issues across DNS, TCP, TLS, HTTP and authentication layers with insurers and banks, including egress and whitelisting requests and vendor escalationsCoordinate change management through ServiceNow CHG records, implementation plans and TCS task coordinationTrack VM vulnerability remediation with TCS based on Wiz findings and triage Invicti DAST results and WAF block investigationsComplete client security questionnaires and manage SailPoint access recertification along with PIM/Entra privileged accessOversee FinOps activities including Azure cost allocation per tenant and line of business, capacity sizing for large client onboardings and infrastructure budget inputSupport developer enablement through access requests, app settings propagation across environments and configuration drift detectionRequirements3+ years of experience in a DevOps role supporting production SaaS platformsExpertise in Azure services such as App Services, Application Gateway, WAF and Azure FirewallProficiency in Azure Key Vault, Blob Storage, Azure DNS, Application Insights and Log AnalyticsSkills in AKS administration and managing self-hosted build agentsKnowledge of Infrastructure as Code using ARM templates and PowerShellBackground in Azure DevOps YAML pipelines and GitHub repository management, rulesets and branch policiesCompetency in incident investigation using Kusto and Kudu diagnosticsUnderstanding of layered connectivity diagnostics (DNS, TCP, TLS, HTTP, auth) for third-party integrationsFamiliarity with ServiceNow change management processesQualifications in security and compliance tools such as Wiz, Invicti DAST and SailPointCapability to manage FinOps activities including cost allocation and capacity sizingFlexibility to use GitHub Copilot CLI agents and skills for DevOps automation workflowsProficiency in English at a B2+ levelWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.