Lead DevOps Engineer

EPAM Systems, Inc.; Turkey; On-site; TRY 5,885,000 - 8,828,000; Full time

Benefits offered by this job

Private health insurance

Competitive USD salary

Career development

Job summary

EPAM Systems, Inc. in Turkey seeks a Lead DevOps Engineer to guide the Unified Automation Platform. You will shape technical strategy for Backstage, multi-cloud infra, security integration, and self-service automation across teams.

The role requires hands-on Terraform/OpenTofu, Ansible, AKS, Azure networking, GitOps, and observability, along with leadership to mentor engineers and align platform goals with business needs.

Qualifications

• Over 5 years of DevOps engineering experience.
• Strong Terraform/OpenTofu and Ansible expertise.
• Deep knowledge of Azure networking, security, and AKS.

Responsibilities

• Lead the design and delivery of the Unified Automation Platform.
• Implement IaC and Config as Code practices across teams.
• Integrate Azure DevOps pipelines and manage CI/CD workflows.
• Develop multi-tenant Backstage platform with RBAC and self-service capabilities.

Skills

Terraform/OpenTofu

Ansible

Kubernetes/AKS

Azure cloud

GitOps (ArgoCD/Flux)

CI/CD automation (ADO)

Security & IAM

Observability

Tools

Backstage

Azure DevOps (ADO)

VMware vSphere

OpenTofu

Terraform

ArgoCD

HashiCorp Vault

NetBox

Job description

We're looking for a skilled Lead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation.ResponsibilitiesSupport the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authenticationConnect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notificationsCreate golden path templates and self-service workflows for development teamsDeliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with AnsibleSet up GitOps workflows to manage continuous deployment and driftAutomate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboardsDevelop and maintain image factory pipelines for VM and container golden imagesRequirementsOver 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and AnsibleAt least 1 year of leadership experienceSolid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route TablesHands-on experience with Azure compute services, including App Services, Container Apps, and Function AppsStrong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure PostgresDeep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and DockerProven skills in Azure DevOps (ADO) pipeline automation and integrationEnglish proficiency at B2 level or aboveNice to haveExperience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC modelsFamiliarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift managementBackground in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBACKnowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secretsScripting and automation skills in Python, Bash, PowerShell, and REST API integrationUnderstanding of networking tools, including DNS automation and IPAM (NetBox)Awareness of observability practices, such as monitoring, metrics, logging, and basic toolingExperience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRSExposure to Azure VMware Solution (AVS) for hybrid/on-prem workload managementExpertise in Image Factory pipelines for VM and container golden imagesKnowledge of Certificate Management tools like VenafiExperience implementing Policy as Code using OPA or similar policy enginesFamiliarity with Privileged Access Management (PAM), including break-the-glass integrationUnderstanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integrationExperience with Security Alerting through SIEM and WAF integrationsKnowledge of firewall platforms like PaloAlto, F5, and CloudflareFamiliarity with ITSM/CMDB integration, including component request workflows and artifact repositoriesExperience with Vulnerability Management dashboards and reportingSkills in Documentation Automation, including generating Solution Design Documents (SDD)We offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.