Senior DevOps Engineer - Azure & Fabric, Secure CI/CD

EPAM Systems

Turkey

On-site

TRY 4,780,000 - 6,692,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Continuous upskilling and development

Diversity of tasks and projects

Mentoring and leadership development

Language and technical courses

Private health insurance

Extra leave days

Referral bonuses

Competitive USD salaries

Job summary

EPAM Systems is seeking a Senior DevOps Engineer to design, build, and maintain secure CI/CD pipelines and cloud infrastructure across Microsoft Azure and Fabric environments. The role emphasizes Azure DevOps, network security, and infrastructure automation to support scalable data platform operations.

The ideal candidate will oversee Azure DevOps pipelines, private endpoints, and security testing within a dynamic, globally enabled environment.

Qualifications

3+ years of experience in DevOps engineering roles supporting cloud-based data platforms.
Expertise in Azure DevOps, Microsoft Azure, and Microsoft Fabric.
Proficiency in configuring and troubleshooting network security components such as VNets, private endpoints, and private DNS.
Skills in building and managing CI/CD pipelines using YAML, repositories, and service connections.
Knowledge of security testing practices, including secret scanning, dependency scanning, and infrastructure-as-code validation.
Understanding of least-privilege access principles and security documentation practices
Background in vulnerability triage, remediation coordination, and compliance documentation

Responsibilities

Build Azure DevOps CI/CD pipelines for Power BI, Fabric Warehouse, Fabric Data Factory, Azure SQL Database, and Xtract Universal.
Configure and maintain self-hosted Azure DevOps agents with access to private endpoints and the Xtract Universal VM.
Manage YAML pipelines, repositories, service connections, approvals, secrets, and environment promotion.
Configure and troubleshoot VNets, private endpoints, private DNS, routing, Key Vault, SQL, and ADLS connectivity.
Monitor the subscription Secure Score and Defender for Cloud recommendations.
Triage vulnerabilities, coordinate and implement remediation, document exceptions, and provide remediation evidence.
Add security testing to CI/CD, including secret scanning, dependency and code scanning, infrastructure-as-code checks, and deployment validation.
Apply least-privilege access and maintain security, deployment, validation, and rollback documentation