Principal Cloud Kubernetes Engineer (AWS & Azure)

EPAM Systems; España; On-site; PHP 6,536,000 - 9,441,000; Full time

Job summary

EPAM Systems seeks a Principal Cloud Kubernetes Engineer (AWS & Azure) in Malaga, Spain, in a hybrid setup. You will design, deploy and operate multi-cloud Kubernetes infrastructure, leveraging GitOps and IaC to enable scalable, reliable platform operations.

You will implement Terraform for cloud resources, Helm/Helmfile for deployments, and ensure observability with Prometheus, Grafana and CloudWatch. Strong security, scripting and collaboration with engineering teams are essential.

Qualifications

• 7+ years of professional engineering experience with modern cloud-native architectures.
• Strong expertise in cloud platforms (AWS and Azure), including EKS and AKS.
• Deep understanding of Kubernetes architecture, networking and security.
• Proven experience with Terraform and Helm/Helmfile.
• Practical knowledge of GitOps tools (ArgoCD or Flux) and declarative deployment.
• Security policies, secrets management and compliance automation.
• Observability tooling (Prometheus, Grafana) and log management (CloudWatch/ELK/EFK).
• Scripting in Bash, Python or Go for automation.
• Contemporary containerization and image lifecycle (Docker, ECR/ACR).
• Excellent documentation and collaboration with engineering teams.

Responsibilities

• Design, implement and maintain production Kubernetes clusters on AWS and Azure.
• Configure GitOps workflows with ArgoCD to enable declarative delivery.
• Develop and manage Terraform IaC and Helm deployments for cloud resources.
• Ensure observability and reliability with Prometheus, Grafana and CloudWatch.
• Apply security best practices including RBAC, network policies and secret management.
• Operate Kubernetes add-ons and ensure capacity planning and performance tuning.
• Collaborate with development teams to improve deployment models and resource utilization.
• Document architectures, workflows and incident handling standards.

Skills

Cloud-native architectures

Kubernetes expertise

GitOps

Infrastructure-as-Code

Security best practices

Observability

Scripting (Bash/Python/Go)

Docker/containerization

Multi-cloud (AWS/Azure)

Tools

Terraform

Helm/Helmfile

ArgoCD

Flux

Prometheus

Grafana

CloudWatch

ELK/EFK

EKS

AKS

Docker

ECR/ACR

Job description

We're looking for a Principal Cloud Kubernetes Engineer (AWS & Azure) to join our team in Malaga, Spain in a hybrid working mode. In this role, you will design, deploy and operate multi-cloud Kubernetes infrastructure across AWS and Azure, leveraging GitOps principles and infrastructure-as-code to enable scalable, reliable and secure platform operations. This position offers the chance to work with cutting-edge Kubernetes ecosystems, enhance automation for mission-critical workloads and collaborate closely with engineering teams to optimize application delivery within a modern cloud-native environment.

Responsibilities

• Design, implement and maintain production Kubernetes clusters on EKS (AWS) and AKS (Azure) across multiple environments and regions
• Configure and operate GitOps workflows with ArgoCD, enabling declarative application delivery and cluster configuration
• Develop and manage Infrastructure-as-Code using Terraform for cloud resources and Helm/Helmfile for Kubernetes deployments
• Ensure observability and reliability with Prometheus, Grafana, CloudWatch and implement monitoring/alerting strategies
• Apply security best practices, including network policies, RBAC, pod security controls and secret management solutions
• Operate and optimize Kubernetes add-ons such as Argo Workflows, Argo Rollouts, cert-manager, CSI drivers and cluster autoscalers
• Diagnose and resolve distributed systems issues in compute, networking and storage layers
• Collaborate with development teams to improve deployment models, scalability and resource utilization
• Ensure clear documentation of architectures, operational workflows and incident handling standards

Requirements

• 7+ years of professional engineering experience with modern cloud-native architectures
• Strong expertise in cloud platforms (AWS and Azure), including EKS, AKS, VPC/VNet, IAM, EBS/EFS, S3, Load Balancers and Route53
• Deep understanding of Kubernetes architecture, networking, storage and security principles with production-scale management experience
• Proven experience with Infrastructure-as-Code workflows: Terraform (module development, state handling) and Helm/Helmfile
• Practical knowledge of GitOps tools (ArgoCD or Flux) and declarative infrastructure deployment
• Experience implementing security policies, secrets management and compliance automation
• Advanced skill in observability tooling (Prometheus, Grafana) and log management via CloudWatch or ELK/EFK
• Scripting proficiency in Bash, Python or Go for automation and system tooling
• Strong knowledge of containerization and image lifecycle using Docker, ECR or ACR
• Clear communication skills and ability to document complex systems effectively
• Nice to have Familiarity with policy-as-code frameworks (Kyverno, OPA/Gatekeeper) Experience with AWS PrivateLink, VPC peering and hybrid/multi-cloud networking Understanding of service mesh patterns, ingress controllers and DNS management Exposure to performance tuning and capacity planning for Kubernetes environments