Lead DevOps Engineer

EPAM Systems; México; Teletrabalho; MXN 900 000 - 1 400 000; Tempo integral

Resumo da oferta

EPAM Systems is seeking a Lead DevOps Engineer to run a one-person DevOps function for a multi-tenant SaaS platform serving insurance and financial services. You will support ~18 .NET microservices and an Angular SSR UI on Microsoft Azure across dev/demo/UAT/prod in primary and DR regions while enabling 30+ developers across five teams.

The role requires strong Azure expertise, AKS administration, IaC with ARM templates and PowerShell, and experience in Azure DevOps and GitHub migrations.

Qualificações

• 5+ years of DevOps experience with production SaaS platforms.
• Strong Azure services knowledge (App Services, AKS, Key Vault, Blob Storage).
• Experience with CI/CD pipelines and GitHub migrations.
• Solid incident analysis using Kusto and Application Insights.

Responsabilidades

• Administer Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights, and Log Analytics.
• Maintain AKS-hosted self-hosted build agents for CI/CD pipelines.
• Implement Infrastructure as Code with ARM templates and PowerShell via shared templates.
• Develop and sustain Azure DevOps YAML pipelines and GitHub repo management, rulesets, and branch policies.
• Resolve pipeline failures and reduce throttling-related disruptions.
• Coordinate change management through ServiceNow CHG records, implementation plans, and task coordination.
• Track VM vulnerability remediation with TCS and triage Wiz findings.
• Assist security questionnaires and SailPoint access recertification.
• Drive FinOps including cost allocation per tenant and capacity sizing.
• Support developer enablement and configuration drift detection.

Conhecimentos

DevOps leadership

Azure

AKS administration

CI/CD automation

Incident analysis

Networking troubleshooting

GitHub/GitHub Actions

ServiceNow CHG processes

FinOps

Ferramentas

Azure DevOps

Kusto

Kudu diagnostics

Invicti DAST

Wiz security platform

SailPoint

PowerShell

ARM templates

Terraform

GitHub

Descrição da oferta de emprego

We are looking for a Lead DevOps Engineer to run a one-person DevOps function for a multi-tenant SaaS platform in insurance and financial services. You will support ~18 .NET microservices and an Angular SSR UI on Microsoft Azure across dev/demo/UAT/prod in primary and DR regions while enabling 30+ developers across five teams.ResponsibilitiesAdminister Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights, and Log AnalyticsMaintain AKS-hosted self-hosted build agents to keep CI/CD workflows running reliablyImplement Infrastructure as Code with ARM templates and PowerShell via shared central pipeline templates used across approximately 20 repositoriesDevelop and sustain Azure DevOps YAML pipelines, manage GitHub repositories, rulesets, and branch policies as part of the ADO-to-GitHub migrationResolve pipeline failures and reduce throttling-related disruptionsAnalyze production incidents using Application Insights, Kusto, and Kudu diagnosticsTroubleshoot third-party integrations with insurers and banks across DNS, TCP, TLS, HTTP, and authentication layers, including egress and whitelisting requests and vendor escalationsCoordinate change management through ServiceNow CHG records, implementation plans, and TCS task coordinationTrack VM vulnerability remediation with TCS based on Wiz findings, triage Invicti DAST results, and investigate WAF blocksComplete client security questionnaires and manage SailPoint access recertification along with PIM/Entra privileged accessDrive FinOps efforts including Azure cost allocation per tenant and line of business, capacity sizing for large client onboardings, and infrastructure budget inputSupport developer enablement through access requests, app settings propagation across environments, and configuration drift detectionRequirementsProven DevOps experience of 5+ years supporting production SaaS platformsExpert-level knowledge of Azure services including App Services, Application Gateway, WAF, and Azure FirewallHands-on proficiency with Azure Key Vault, Blob Storage, Azure DNS, Application Insights, and Log AnalyticsStrong capability in AKS administration and running self-hosted build agentsSolid background in Infrastructure as Code using ARM templates and PowerShellDemonstrated experience with Azure DevOps YAML pipelines and GitHub repository management, rulesets, and branch policiesProficiency in incident analysis using Kusto and Kudu diagnosticsDeep understanding of layered connectivity troubleshooting (DNS, TCP, TLS, HTTP, auth) for third-party integrationsWorking knowledge of ServiceNow change management processesExperience with security and compliance tooling such as Wiz, Invicti DAST, and SailPointAbility to handle FinOps activities including cost allocation and capacity sizingComfort using GitHub Copilot CLI agents and applying DevOps automation workflowsEnglish proficiency at B2+ (Upper-Intermediate) levelWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.