Lead Azure Engineer

EPAM Systems; México; Remote; MXN 900,000 - 1,300,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling & certification courses

Global career opportunities

Job summary

EPAM Systems seeks a Lead Azure Engineer to drive enterprise cloud design, integration, and security. You will leverage Microsoft Azure and Entra ID expertise to deliver secure, scalable applications and ensure seamless authentication and authorization across the enterprise.

Collaborate with cross-functional teams including application, security, architecture, and infrastructure to implement secure API access, Managed Identities, and Conditional Access policies, while mentoring peers on cloud

Qualifications

• 5+ years of hands-on experience with Microsoft Azure cloud services and security.
• Expertise in Microsoft Entra ID, including App Registrations, Enterprise Applications, and Service Principals.
• Proficiency in configuring API Permissions, Managed Identities, and Conditional Access.
• Strong understanding of OAuth 2.0 authentication and authorization flows.
• Knowledge of OpenID Connect (OIDC), including ID tokens, access tokens, scopes, claims, and JWT.

Responsibilities

• Lead the design and implementation of secure Azure cloud solutions across the enterprise.
• Manage and configure Microsoft Entra ID components including App Registrations, Enterprise Applications, and Service Principals.
• Integrate enterprise applications and APIs with Microsoft Entra ID.
• Configure and maintain API Permissions, Managed Identities, and Conditional Access policies.
• Troubleshoot authentication, authorization, token, and integration issues.
• Collaborate with cross-functional teams to deliver cohesive cloud and identity solutions.
• Support and optimize Azure Cosmos DB implementations.
• Provide technical leadership and mentorship on cloud and identity best practices.

Skills

Leadership

Azure cloud

IAM

OAuth 2.0

OIDC

API integration

Troubleshooting

English proficiency

Tools

Azure Cosmos DB

Microsoft Entra ID

App Registrations

Enterprise Applications

Service Principals

Conditional Access

Job description

We are seeking a highly skilled Lead Azure Engineer to drive the design, integration, and security of enterprise cloud solutions. In this role, you will leverage your deep expertise in Microsoft Azure and identity platforms to deliver secure, scalable, and robust applications. You will collaborate closely with cross-functional teams to ensure seamless authentication, authorization, and integration across the enterprise ecosystem.ResponsibilitiesLead the design and implementation of secure Azure cloud solutions across the enterpriseManage and configure Microsoft Entra ID components, including App Registrations, Enterprise Applications, and Service PrincipalsIntegrate enterprise applications and APIs with Microsoft Entra IDConfigure and maintain API Permissions, Managed Identities, and Conditional Access policiesTroubleshoot authentication, authorization, token, and integration issuesEnsure secure API access and enforce identity-based security standardsCollaborate with application, security, architecture, and infrastructure teams to deliver cohesive solutionsSupport and optimize Azure Cosmos DB implementationsProvide technical leadership and mentorship on cloud and identity best practicesRequirements5+ years of hands-on experience with Microsoft Azure cloud services and securityAt least 1 year of relevant leadership experienceExpertise in Microsoft Entra ID, including App Registrations, Enterprise Applications, and Service PrincipalsProficiency in configuring API Permissions, Managed Identities, and Conditional AccessStrong understanding of OAuth 2.0 authentication and authorization flows, including Authorization Code and Client CredentialsKnowledge of OpenID Connect (OIDC), including ID tokens, access tokens, scopes, claims, and JWTBackground in integrating enterprise applications and APIs with Microsoft Entra IDCapability to troubleshoot authentication, authorization, token, and integration issuesUnderstanding of secure API access and identity-based security principlesExperience collaborating with application, security, architecture, and infrastructure teamsFamiliarity with Azure Cosmos DBExcellent command of written and spoken English (B2+ level)Nice to haveSkills in designing and implementing enterprise Identity and Access Management (IAM) solutionsExpertise in IAM concepts, including authentication, authorization, and SSOCompetency in MFA, RBAC, and identity lifecycle managementWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.