We are seeking a Lead DevOps Engineer to lead Azure platform automation across Azure infrastructure, AKS, identity, and golden-image pipelines in our Software, System, and Test Engineering group. You will drive CI/CD-based delivery and reliability for our IaC engine and partner with architects to standardize and scale.
Responsibilities
- Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres based on Azure Architect designs
- Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster and node-pool provisioning and namespace onboarding
- Configure AKS add-ons including ingress, cert-manager, external-dns, monitoring, and policy
- Implement identity wiring for Azure workloads using managed identities and SPN or app registrations
- Integrate secrets management using Azure Key Vault and OpenBao for Azure workloads
- Build and maintain Image Factory pipelines for VM and container golden images across Linux and Windows baselines
- Execute Ansible playbooks for VM post-provisioning and golden-image handoff
- Support Backstage golden-path templates for Azure provisioning and validate generated infrastructure end-to-end
- Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption
- Contribute to module testing, drift detection, and documentation aligned with the Infrastructure as Code Engine standards
Requirements
- 5+ years of experience building and operating Microsoft Azure infrastructure via Terraform/OpenTofu with CI/CD using Azure DevOps
- Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management
- Leadership experience guiding Infrastructure as Code standards, reviews, and delivery across teams
- Project delivery experience troubleshooting and remediating production issues across Azure automation during Implementation and Adoption
- Strong Terraform/OpenTofu skills for modular infrastructure design, testing, and drift detection
- Strong Ansible skills for Configuration as Code, VM post-provisioning, and golden-image pipeline integration
- Solid Azure networking knowledge including VNets, private endpoints, and NSGs for integration with a network foundation
- Strong Azure identity knowledge including managed identities, SPN/app registrations, and secrets integration with Azure Key Vault and OpenBao
- Effective collaboration skills to partner with Azure and Network Architects and support Backstage golden-path adoption
- English proficiency at B2 level or higher
Nice to have
- Experience with Azure VMware Solution (AVS) private cloud provisioning
- Familiarity with image hardening and scanning tooling
- Experience publishing images using Azure Shared Image Gallery
We offer
- CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT
- Diversity of tasks and projects
- Assessment center for objective review of competency level
- Personal development plan
- Mentoring programs and leadership development
- Certification and professional development support
- Access to learning platforms including more than 2,500 internal courses
- English courses taught by certified teachers
- CORPORATE BENEFITS
- Extra leave days
- Referral bonuses
- COMPENSATION PACKAGE
- Competitive compensation paid in USD
- Regular salary and performance reviews
- MEDICAL & HEALTHCARE
- Private health insurance
- Well-being events
- WORKING ENVIRONMENT
- Recreation areas and kitchens
- Tea, coffee and snacks
- Sports equipment and game consoles
- IT Equipment
- Microsoft’s Software Assurance Home Use Program (HUP)
Please note that our Talent Attraction Team reviews applications and CVs submitted in English. EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.