Lead Azure Cloud Engineer

EPAM Systems, Inc.; Turkey; On-site; TRY 1,000,000 - 1,300,000; Full time

Benefits offered by this job

Private health insurance

English courses

Mentoring programs

Career development

Job summary

EPAM Systems, Inc. seeks a seasoned Lead Azure Cloud Engineer to design, build, and operate scalable Azure infrastructure for enterprise workloads, including AI-enabled solutions.

You will work with Cloud Architects, DevOps, Security, and Data teams to implement repeatable deployment patterns, secure networking, and cost-efficient services. Your responsibilities span AKS management, IaC with Terraform, CI/CD pipelines, observability, and cloud governance.

Qualifications

• Extensive hands-on experience architecting and managing Azure cloud solutions in enterprise environments.
• Strong expertise in Azure networking, identity, governance, security, monitoring, and platform services.
• Experience with Azure Kubernetes Service (AKS), containers, registries, ingress, autoscaling, and security.
• Experience with Terraform or similar IaC tools, including multi-environment delivery.
• Experience with CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI/CD).
• Solid DevOps and DevSecOps practices including automated testing, scanning, release automation.
• Experience with GitHub Copilot or AI-assisted development tools for infra and automation.
• Background with Azure PaaS and services like App Service, Functions, Logic Apps, API Management, Event Grid, Service Bus, Storage, Key Vault, SQL, Cosmos DB.
• Experience with observability using Azure Monitor, Log Analytics, Application Insights, Container Insights.
• Familiarity with AI services: Azure OpenAI, Azure AI Search, Azure Machine Learning; RAG patterns.

Responsibilities

• Design, implement, and maintain Azure cloud infrastructure including subscriptions, resource groups, networking, identity, governance, security, and platform services.
• Develop reusable Azure deployment patterns and IaC modules for multi-environment deployments.
• Operate and optimize AKS environments including node pools, ingress, workload identity, secrets management, autoscaling, and monitoring.
• Create and implement CI/CD pipelines and integrate with DevOps tools.
• Support DevOps practices including automated builds, testing, security scanning, artifact management, and release automation.
• Leverage AI-assisted tools to boost productivity in scripting, IaC development, and pipeline creation.
• Implement secure integration patterns using managed identities, RBAC, private endpoints, DNS, NSGs, firewalls, API gateways.
• Set up observability with Azure Monitor, Log Analytics, Application Insights, and runbooks.
• Provide technical guidance, code reviews, and engineering leadership to team members.
• Collaborate with architects to translate requirements into practical Azure implementations.

Skills

Azure

Terraform

CI/CD

GitHub Actions

Azure Kubernetes Service

DevSecOps

Observability

Networking

Security controls

AI-enabled cloud

IaC

Automation scripting

Education

Azure certifications (Admin/DevOps/Architect)

Tools

Terraform

GitHub Actions

Azure DevOps

GitLab CI/CD

AKS

Kubernetes

PowerShell

Python

Job description

We're looking for a seasoned Lead Azure Cloud Engineer to architect, construct, automate, and manage secure, scalable, and cost-effective cloud solutions on Microsoft Azure.This role involves direct engagement with Azure infrastructure, containerization, DevOps pipelines, Infrastructure as Code, observability, security controls, and AI-driven cloud solutions. You'll help convert architecture standards into functioning platforms, repeatable deployment patterns, automation processes, and production-ready services.You'll partner closely with Cloud Architects, Platform Engineering, DevOps, Security, Networking, Data, AI, and Product teams to deliver strong Azure solutions supporting modern application delivery, containerized workloads, and enterprise AI capabilities.ResponsibilitiesDesign, implement, and maintain Azure cloud infrastructure, including subscriptions, resource groups, networking, identity, governance, security, and platform servicesConstruct and support reusable Azure deployment patterns for applications, APIs, front-end workloads, microservices, containers, serverless services, data integrations, and AI-enabled solutionsOperate and implement Azure Kubernetes Service environments, covering node pools, ingress, workload identity, secrets management, autoscaling, networking, monitoring, container registry integration, and security controlsDevelop, maintain, and enhance Infrastructure as Code using Terraform, including reusable modules, multi-environment deployments, automated validation, and CI/CD pipeline integrationCreate and implement CI/CD pipelines using GitHub Actions, Azure DevOps, GitLab CI/CD, or comparable toolsSupport DevOps practices including automated builds, testing, security scanning, artifact management, environment promotion, deployment approvals, rollback strategies, and release automationLeverage GitHub Copilot and AI-assisted engineering tools to boost productivity in scripting, IaC development, CI/CD pipeline creation, code review, troubleshooting, documentation, and automationDeploy cloud-native solutions using Azure services such as App Service, Azure Functions, Logic Apps, Event Grid, Service Bus, Storage, Key Vault, API Management, Azure SQL, Cosmos DB, Azure Monitor, and Application InsightsSupport implementation of AI-enabled solutions using Azure AI, Azure OpenAI, Azure AI Search, Azure Machine Learning, and related Azure AI servicesConstruct and integrate AI solution components based on patterns such as RAG, agentic workflows, multi-agent orchestration, tool/function calling, prompt management, grounding, evaluation, and responsible AI controlsImplement secure integration patterns leveraging managed identities, RBAC, private endpoints, private DNS, network security groups, firewalls, and API gatewaysSet up and maintain observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerts, distributed tracing, and operational runbooksResolve complex cloud, networking, deployment, performance, security, and production incidentsApply DevSecOps practices including secrets management, dependency scanning, container image scanning, policy validation, secure configuration, and compliance automationEnhance Azure environments for performance, reliability, scalability, and cost efficiencyContribute to technical standards, reusable templates, documentation, operational procedures, and platform engineering practicesOffer technical guidance, mentoring, code reviews, and engineering leadership to team membersCollaborate with architects and stakeholders to convert requirements into practical, secure, and maintainable Azure implementationsRequirementsExtensive hands-on experience architecting, implementing, and managing Azure cloud solutions within enterprise environmentsStrong grasp of Azure networking, identity, governance, security, monitoring, and platform servicesApplied experience with Azure Landing Zone concepts, hub-and-spoke networking, private endpoints, private DNS, firewalls, NSGs, route tables, and workload integration patternsExtensive hands-on experience with Azure Kubernetes Service, containers, container registries, ingress controllers, workload identity, autoscaling, monitoring, and container securityExtensive experience with Terraform or similar Infrastructure as Code tools, including module development, state management, validation, and multi-environment deliveryExtensive experience with CI/CD pipelines, ideally using GitHub Actions, Azure DevOps, GitLab CI/CD, or similar platformsSolid grasp of DevOps and DevSecOps practices including automated testing, security scanning, artifact management, release automation, and deployment governanceBackground working with GitHub, pull requests, code reviews, branching strategies, and collaborative engineering workflowsApplied experience using GitHub Copilot or comparable AI-assisted development tools for infrastructure, automation, scripting, pipeline development, or documentationBackground with Azure PaaS and integration services such as App Service, Azure Functions, Logic Apps, API Management, Event Grid, Service Bus, Storage, Key Vault, Azure SQL, Cosmos DB, and related servicesBackground implementing observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerting, and operational runbooksGrasp of Azure AI and Generative AI services, particularly Azure OpenAI, Azure AI Search, and AI-enabled automation patternsApplied knowledge of AI architecture patterns such as RAG, agentic workflows, multi-agent systems, tool/function calling, grounding, prompt management, evaluation, and responsible AICapability to resolve complex technical issues spanning cloud infrastructure, networking, containers, CI/CD, security, and application integrationSolid scripting and automation abilities using PowerShell, Bash, Python, or comparable languagesCapacity to work independently, own technical delivery, and support production-grade cloud environmentsStrong communication skills and capability to collaborate with architects, engineers, security teams, product teams, and business stakeholdersNice to haveMicrosoft Azure certifications such as Azure Administrator Associate, Azure Developer Associate, Azure DevOps Engineer Expert, or Azure Solutions Architect ExpertKubernetes certifications such as CKA, CKAD, or CKSBackground with production-grade AKS platforms, service mesh, GitOps, Helm, Kustomize, Flux, Argo CD, or Kubernetes policy enginesBackground with Azure AI Foundry, Semantic Kernel, LangChain, LangGraph, AutoGen, or comparable AI orchestration frameworksBackground constructing or supporting RAG platforms, AI agents, multi-agent workflows, or enterprise knowledge search solutionsBackground with platform engineering, internal developer platforms, self-service cloud capabilities, paved roads, and reusable engineering templatesBackground working in regulated industries with strong compliance, security, auditability, and governance requirementsFamiliarity with SRE practices, incident response, reliability engineering, performance testing, and cost optimizationWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.