Senior DevOps Engineer - Azure

EPAM Systems, Inc.; Turkey; On-site; TRY 2,948,000 - 4,668,000; Full time

Benefits offered by this job

Continuous upskilling

Private health insurance

Career development programs

Job summary

EPAM Systems, Inc. is seeking a Senior DevOps Engineer to drive Azure infrastructure initiatives, focusing on Terraform/OpenTofu, AKS, and Configuration as Code.

You will implement modules for Azure services, manage AKS clusters, and integrate identity and secret management with Key Vault. The role emphasizes building scalable cloud environments, maintaining image pipelines, and contributing to infrastructure testing and documentation.

Qualifications

• 3+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps.
• Experience operating AKS clusters in production, including networking, policy, and namespace management.
• Experience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault).
• Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelines.
• Familiarity with Azure networking constructs (VNets, private endpoints, NSGs).

Responsibilities

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres.
• Build and operate the AKS platform day-to-day, including cluster provisioning and add-on configuration.
• Implement identity wiring and secrets integration for Azure workloads.
• Create and maintain Image Factory pipelines for VM and container baselines, CIS hardening, and image scanning.
• Execute Ansible playbooks for VM post-provisioning and golden-image handoff.
• Support Backstage templates integration for Azure provisioning and end-to-end testing.
• Troubleshoot production issues across Azure automation modules during implementation and adoption.
• Contribute to module testing, drift detection, and documentation per IaC Engine standards.

Skills

Azure IaC

AKS management

CI/CD with Azure DevOps

GitHub Copilot usage

Azure Networking basics

Tools

Ansible

Azure Key Vault

Image Factory pipelines

OpenTofu

Job description

We are looking for a Senior DevOps Engineer to join our team and drive the implementation and operation of our Azure infrastructure platform, working across Terraform/OpenTofu, Kubernetes, and Configuration as Code to deliver reliable, scalable cloud environments.ResponsibilitiesImplement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure ArchitectBuild and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster/node-pool provisioning, add-on configuration (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboardingImplement identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao) for Azure workloadsBuild and maintain Image Factory pipelines for VM and container golden images (Linux and Windows/cloudbase-init baselines, CIS hardening, image scanning)Execute Configuration as Code (Ansible) playbooks for VM post-provisioning and golden-image handoffSupport Backstage golden-path template integration for Azure provisioning, testing generated infrastructure end-to-endTroubleshoot and remediate production issues across Azure automation modules during Implementation and AdoptionContribute to module testing, drift detection, and documentation per the platform's Infrastructure as Code Engine standardsRequirements3+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOpsExperience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace managementExperience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelinesWorking knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with the network foundation owned by the Network ArchitectCombined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot (provided project-wide) as standard practiceEnglish proficiency at B2 level or higherNice to haveExperience with Azure VMware Solution (AVS) private cloud provisioningFamiliarity with image hardening/scanning tooling and Shared Image Gallery publishingWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.