Lead DevOps Engineer

EPAM Systems, Inc.; Turkey; Hybrid; TRY 5,897,000 - 8,845,000; Full time

Benefits offered by this job

Health insurance

Learning & development

English courses

Referral bonuses

Extra leave days

Job summary

EPAM Systems, Inc. seeks a Lead DevOps Engineer to drive a Unified Automation Platform, including Backstage, cloud provisioning (Azure & VMware), and security integration. You will lead infrastructure as code, GitOps, and multi-tenancy, partnering with teams to deliver scalable self-service automation.

You will guide CI/CD integration with ADO, design golden paths, and implement observability dashboards while advancing enterprise-scale DevOps practices.

Qualifications

• 5+ years in DevOps with hands-on Terraform/OpenTofu and Ansible.
• 1+ year leadership experience leading teams or projects.
• Strong Azure networking and security services knowledge.
• Hands-on Azure compute services and databases experience.
• Deep Kubernetes/AKS provisioning, dashboards and ops.

Responsibilities

• Guide design and build of a Unified Automation Platform.
• Lead Backstage portal strategy, RBAC and multi-tenancy.
• Connect Azure DevOps for CI/CD pipelines and alerts.
• Create self-service templates and golden path workflows.
• Manage IaC with Terraform/OpenTofu and Ansible.

Skills

Terraform/OpenTofu

Ansible

Azure DevOps

Kubernetes/AKS

Backstage

GitOps

Python/Bash/PowerShell

Cloud provisioning

Observability

Tools

Terraform/OpenTofu

Ansible

Azure DevOps (ADO)

Kubernetes/AKS

VMware vSphere/NSX

Job description

We're looking for a skilled Lead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation.ResponsibilitiesSupport the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authenticationConnect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notificationsCreate golden path templates and self-service workflows for development teamsDeliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with AnsibleSet up GitOps workflows to manage continuous deployment and driftAutomate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboardsDevelop and maintain image factory pipelines for VM and container golden imagesRequirementsOver 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and AnsibleAt least 1 year of leadership experienceSolid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route TablesHands-on experience with Azure compute services, including App Services, Container Apps, and Function AppsStrong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure PostgresDeep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and DockerProven skills in Azure DevOps (ADO) pipeline automation and integrationEnglish proficiency at B2 level or aboveNice to haveExperience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC modelsFamiliarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift managementBackground in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBACKnowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secretsScripting and automation skills in Python, Bash, PowerShell, and REST API integrationUnderstanding of networking tools, including DNS automation and IPAM (NetBox)Awareness of observability practices, such as monitoring, metrics, logging, and basic toolingExperience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRSExposure to Azure VMware Solution (AVS) for hybrid/on-prem workload managementExpertise in Image Factory pipelines for VM and container golden imagesKnowledge of Certificate Management tools like VenafiExperience implementing Policy as Code using OPA or similar policy enginesFamiliarity with Privileged Access Management (PAM), including break-the-glass integrationUnderstanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integrationExperience with Security Alerting through SIEM and WAF integrationsKnowledge of firewall platforms like PaloAlto, F5, and CloudflareFamiliarity with ITSM/CMDB integration, including component request workflows and artifact repositoriesExperience with Vulnerability Management dashboards and reportingSkills in Documentation Automation, including generating Solution Design Documents (SDD)We offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.