Cloud Foundation Engineer

EPAM Systems; España; On-site; PHP 4,922,644 - 6,329,114; Full time

Job summary

EPAM Systems is seeking a Senior Cloud Foundation Engineer to join our team in Malaga, Spain, with a hybrid working model. In this role, you will design and implement critical cloud foundation services, ensuring secure governance and platform reliability for enterprise-scale infrastructure.

Your responsibilities will include developing IAM policies, collaborating on compliance standards, and architecting secure connectivity patterns. The ideal candidate will have proven experience in cloud governance, strong Python coding skills, and a background in enterprise-scale infrastructure systems.

Qualifications

• Experience in enterprise-scale cloud infrastructure governance.
• Hands-on proficiency in major cloud providers like AWS or Azure.
• Strong production-level coding skills in Python.

Responsibilities

• Design and enforce IAM policies in multi-account environments.
• Ownership of cloud governance models for multi-team environments.
• Collaborate with teams to ensure compliance with security standards.

Skills

Cloud infrastructure governance

IAM policy design

Python coding

Analytical problem-solving

Multi-cloud governance

Tools

AWS

Azure

Job description

We're looking for a Senior Cloud Foundation Engineer to join our team in Malaga, Spain in a hybrid working mode. In this role, you will own the design and implementation of critical cloud foundation services, ensuring secure governance, access controls and platform reliability for enterprise-scale infrastructure. You will work on core cloud governance challenges such as IAM policy architecture, multi-tenant isolation and service connectivity — not just CI/CD tooling — while enabling rapid, safe innovation in high-stakes financial environments. Join a strategic engineering function tasked with building secure, scalable and resilient cloud foundations for one of the most sophisticated financial platforms in the world. You’ll influence control-plane decisions that define how the entire organization consumes cloud services.

Responsibilities

• Design and enforce IAM policies and least-privilege access frameworks across multi-account or multi-project environments.
• Ownership of cloud governance models and platform security boundaries to support multi-team environments at scale.
• Architect and implement multi-tenant isolation mechanisms, private networking and secure connectivity patterns.
• Develop production-grade solutions in Python, applying best practices for system design, modularity and error handling.
• Diagnose and resolve business-critical issues during on-call rotations, ensuring system resilience and reliability.
• Collaborate with security, infrastructure and application teams to maintain alignment with regulatory and compliance standards.
• Drive automation and tooling for governance, policy validation and access control enforcement.
• Continuously assess platform maturity and recommend improvements to strengthen security and reduce risk.

Requirements

• Demonstrated experience owning enterprise-scale cloud infrastructure governance (IAM, control-plane design, security boundaries) — not limited to consuming services.
• Hands‑on proficiency in cloud foundations for at least one major provider (Azure, AWS, or equivalent), including IAM/authentication design and enforcement, multi-tenant isolation and account/project governance, and networking design (private endpoints, routing, service connectivity).
• Proven production-level coding skills in Python (beyond scripting), with strong knowledge in modular system architecture and error handling.
• Previous exposure to enterprise-scale infrastructure systems or software platforms, ideally in regulated industries.
• Strong analytical, problem-solving and strategic thinking skills.
• Ability to act as an escalation point for urgent issues and rapidly implement secure solutions.

Nice to have

• Multi-cloud governance experience across Azure and AWS.
• Familiarity with compliance frameworks and their application within cloud foundations.
• Previous experience defining security and access governance for financial or mission-critical systems.
• Expertise in infrastructure policy automation tooling.