cloud architect in Azure infrastructure

EPAM; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation opportunities

English classes

Stock Purchase Plan

Health & family care package

Learning & certifications access

Well-being programs

Housing support

Job summary

EPAM ищет опытного архитектора облачной инфраструктуры для проектирования и реализации инфраструктуры как код в Azure, включая AKS, IAM и интеграции с Backstage. Ваша роль — определить архитектуру, стандарты и обеспечить поддержку жизненного цикла модулей.

Кандидат будет работать над связкой инфраструктуры, сетей и безопасностью, участвуя в реализации проектов на глобальном уровне с возможностью релокации и обучения.

Qualifications

• 108+ месяцев опыта работы в области облачной инфраструктуры и архитектуры
• Опыт проектирования и внедрения инфраструктуры как код в Azure
• Знание Entra ID, AD, GPO, M365 и спn/регистраций приложений
• Опыт взаимодействия с командой безопасности и операционной командой
• Опыт разработки AKS-платформ и интеграции с сетью и безопасность

Responsibilities

• Архитектурировать модули IaC для сервисов Azure, БД и Azure VMware Solution
• Определять архитектуру идентификации Azure и секреты в Key Vault
• Проектировать Azure Kubernetes Service платформу, кластер и pool-ы нод
• Сотрудничать с Network Architect по связке сети и ExpressRoute
• Разрабатывать Image Factory и базовые образы Linux/Windows
• Установить Standard инфраструктуры как код: remote state, RBAC, модульный реестр
• Сопровождать Backstage‑п provisioning capabilities как готовые шаблоны
• Обеспечивать архитектурное руководство и подготовку к развёртыванию в продакшн

Skills

IaC design

Azure архитектура

Безопасность и IAM

Backstage интеграции

Tools

Azure AKS

Key Vault

NetBox IPAM

Backstage

Job description

Описание: Описания нет

Задачи:

• Architect Infrastructure as Code modules for Azure services, databases, and Azure VMware Solution, including managed identities, private endpoints, and diagnostic settings
• Define Azure identity architecture with the security team, covering Entra ID, Active Directory, Group Policy Objects, M365 groups, SPN/app registrations, and managed identities, and ensure secrets are stored in OpenBao/Key Vault according to platform standards
• Design the Azure Kubernetes Service platform, including cluster and node-pool design, baseline add-ons, namespace and tenant onboarding, and an operations dashboard
• Collaborate with the Network Architect on core connectivity, Azure Firewall, NSGs, DNS, NetBox IPAM, and ExpressRoute, ensuring Azure compute, database, and AKS modules integrate with the network foundation
• Define the Image Factory architecture for VM and container golden images, including Linux and Windows/cloudbase-init baselines, CIS hardening, agent injection, image scanning, and Shared Image Gallery publishing and versioning
• Establish Infrastructure as Code Engine standards, including remote state/backend, locking, RBAC, module registry, testing framework, drift detection, policy hooks, and secrets injection for other automation modules
• Partner with the Backstage Architect to expose Azure provisioning capabilities as Backstage golden-path templates, and with Integration Architects on observability, ITSM/CMDB, and security integrations involving Azure resources
• Provide architectural governance during implementation, validate production deployments, and support module lifecycle ownership during adoption

Требования:

108 Months of experience

Условия:

• Opportunity to work abroad for up to two months per year
• Relocation opportunities within offices in 55+ countries
• Corporate and social events
• Leadership development, career advising, soft skills, and well-being programs
• Certifications, including GCP, Azure, and AWS Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers
• Discounts at local language schools, including online Kazakh courses
• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Medical and family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Benefits package including sports activities and discounts at stores and services
• Housing support program with preferential mortgage access through the Otbasy Bank partnership