Lead Azure Cloud Engineer

EPAM Systems; Polska; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Health insurance

Multisport benefit

Shopping vouchers

Employee stock purchase plan

Job summary

EPAM Systems in Poland is seeking a seasoned Lead Azure Cloud Engineer to architect, deploy, and automate secure and scalable cloud solutions on Microsoft Azure. You will work across Azure infrastructure, containers, IaC, and AI-driven cloud capabilities to deliver production-ready services.

You will collaborate with Cloud Architects, Platform Engineering, DevOps, Security, and Data teams to enable modern application delivery, containerized workloads, and enterprise AI-enabled solutions.

Qualifications

• Extensive hands-on experience architecting, deploying, and managing Azure cloud solutions in enterprise settings.
• Strong knowledge of Azure networking, identity, governance, security, monitoring, and platform services.
• Experience with Azure Landing Zones, hub-and-spoke networking, private endpoints, and private DNS.

Responsibilities

• Architect, deploy, and manage Azure cloud infrastructure for subscriptions, resource groups, networking, identity, governance, and platform services.
• Develop repeatable deployment patterns for apps, APIs, and microservices using IaC and CI/CD.
• Deploy and manage AKS environments with proper security, monitoring, and scale.

Skills

Azure cloud architecture

DevOps practices

Terraform

CI/CD pipelines

GitHub Actions

Azure Kubernetes Service

Shell/Python automation

AI-assisted tooling

Observability

Security controls

Tools

Terraform

GitHub Actions

Azure DevOps

GitLab CI/CD

AKS

Kubernetes

Helm/Kustomize

Job description

We are looking for a seasoned Lead Azure Cloud Engineer to architect, develop, automate, and manage secure, scalable, and cost-effective cloud solutions on Microsoft Azure.Within this position, you will engage directly with Azure infrastructure, containers, DevOps pipelines, Infrastructure as Code, observability, security controls, and AI-driven cloud solutions. You will assist in converting architecture standards into functional platforms, repeatable deployment patterns, automation, and production-ready services.You will partner closely with Cloud Architects, Platform Engineering, DevOps, Security, Networking, Data, AI, and Product teams to provide reliable Azure solutions that enable modern application delivery, containerized workloads, and AI-driven enterprise capabilities.ResponsibilitiesArchitect, deploy, and manage Azure cloud infrastructure, covering subscriptions, resource groups, networking, identity, governance, security, and platform servicesDevelop and maintain repeatable Azure deployment patterns for applications, APIs, front-end workloads, microservices, containers, serverless services, data integrations, and AI-driven solutionsDeploy and manage Azure Kubernetes Service environments, encompassing node pools, ingress, workload identity, secrets management, autoscaling, networking, monitoring, container registry integration, and security controlsCreate, sustain, and enhance Infrastructure as Code with Terraform, including reusable modules, multi-environment deployments, automated validation, and CI/CD pipeline integrationArchitect and deploy CI/CD pipelines with GitHub Actions, Azure DevOps, GitLab CI/CD, or comparable toolsEnable DevOps practices including automated builds, testing, security scanning, artifact management, environment promotion, deployment approvals, rollback strategies, and release automationLeverage GitHub Copilot and AI-assisted engineering tools to boost productivity across scripting, IaC development, CI/CD pipeline creation, code review, troubleshooting, documentation, and automationDeploy cloud-native solutions using Azure services including App Service, Azure Functions, Logic Apps, Event Grid, Service Bus, Storage, Key Vault, API Management, Azure SQL, Cosmos DB, Azure Monitor, and Application InsightsAssist with deploying AI-driven solutions using Azure AI, Azure OpenAI, Azure AI Search, Azure Machine Learning, and related Azure AI servicesDevelop and integrate AI solution components based on patterns including RAG, agentic workflows, multi-agent orchestration, tool/function calling, prompt management, grounding, evaluation, and responsible AI controlsDeploy secure integration patterns using managed identities, RBAC, private endpoints, private DNS, network security groups, firewalls, and API gatewaysSet up and sustain observability with Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerts, distributed tracing, and operational runbooksResolve complex cloud, networking, deployment, performance, security, and production incidentsImplement DevSecOps practices including secrets management, dependency scanning, container image scanning, policy validation, secure configuration, and compliance automationTune Azure environments for performance, reliability, scalability, and cost efficiencyContribute to technical standards, reusable templates, documentation, operational procedures, and platform engineering practicesOffer technical guidance, mentoring, code reviews, and engineering leadership to fellow team membersCollaborate with architects and stakeholders to convert requirements into practical, secure, and maintainable Azure implementationsRequirementsExtensive hands-on experience architecting, deploying, and managing Azure cloud solutions in enterprise settingsSound knowledge of Azure networking, identity, governance, security, monitoring, and platform servicesHands-on experience with Azure Landing Zone concepts, hub-and-spoke networking, private endpoints, private DNS, firewalls, NSGs, route tables, and workload integration patternsExtensive hands-on experience with Azure Kubernetes Service, containers, container registries, ingress controllers, workload identity, autoscaling, monitoring, and container securitySubstantial experience with Terraform or other Infrastructure as Code tools, including module development, state management, validation, and multi-environment deliverySubstantial experience with CI/CD pipelines, ideally using GitHub Actions, Azure DevOps, GitLab CI/CD, or similar platformsSolid grasp of DevOps and DevSecOps practices, including automated testing, security scanning, artifact management, release automation, and deployment governanceExperience with GitHub, pull requests, code reviews, branching strategies, and collaborative engineering workflowsHands-on experience using GitHub Copilot or comparable AI-assisted development tools for infrastructure, automation, scripting, pipeline development, or documentationExperience with Azure PaaS and integration services including App Service, Azure Functions, Logic Apps, API Management, Event Grid, Service Bus, Storage, Key Vault, Azure SQL, Cosmos DB, and related servicesExperience deploying observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerting, and operational runbooksKnowledge of Azure AI and Generative AI services, particularly Azure OpenAI, Azure AI Search, and AI-driven automation patternsWorking knowledge of AI architecture patterns including RAG, agentic workflows, multi-agent systems, tool/function calling, grounding, prompt management, evaluation, and responsible AICapacity to resolve complex technical issues spanning cloud infrastructure, networking, containers, CI/CD, security, and application integrationStrong scripting and automation abilities using PowerShell, Bash, Python, or similar languagesCapacity to operate independently, own technical delivery, and support production-grade cloud environmentsExcellent communication abilities and capacity to collaborate with architects, engineers, security teams, product teams, and business stakeholdersNice to haveMicrosoft Azure certifications including Azure Administrator Associate, Azure Developer Associate, Azure DevOps Engineer Expert, or Azure Solutions Architect ExpertKubernetes certifications including CKA, CKAD, or CKSExperience with production-grade AKS platforms, service mesh, GitOps, Helm, Kustomize, Flux, Argo CD, or Kubernetes policy enginesExperience with Azure AI Foundry, Semantic Kernel, LangChain, LangGraph, AutoGen, or similar AI orchestration frameworksExperience developing or supporting RAG platforms, AI agents, multi-agent workflows, or enterprise knowledge search solutionsExperience with platform engineering, internal developer platforms, self-service cloud capabilities, paved roads, and reusable engineering templatesExperience in regulated industries with rigorous compliance, security, auditability, and governance requirementsFamiliarity with SRE practices, incident response, reliability engineering, performance testing, and cost optimizationWe offerWe gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusivelyEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.