devops engineer for a Unified Automation Platform

HireHi; United States; Remote; USD 130,000 - 180,000; Full time

Job summary

EPAM ищет DevOps-инженера с опытом разработки и поддержки внутренней DevOps-платформы на базе Backstage. Вы будете строить и разворачивать многоуровневые RBAC-модели и архитектуру многопользовательской среды, интегрируя Terraform/OpenTofu и Ansible для IaC.

Ключевая роль включает управление AKS, настройку CI/CD через Azure DevOps, создание самообслуживаемых рабочих шаблонов и внедрение GitOps-подходов в рамках Azure-окружения.

Qualifications

• 5+ лет опыта DevOps-инженерии.
• Опыт работы с Terraform/OpenTofu и Ansible.
• Умение выстраивать RBAC и многоуровневую многоарендность.

Responsibilities

• Поддержка проектирования внутренней платформы разработчика Backstage.
• Разработка многоуровневых RBAC и многоарендной архитектуры.
• Интеграция Azure DevOps для CI/CD и уведомлений.
• Создание шаблонов рабочих процессов и самообслуживания.
• Автоматизация инфраструктуры как код (Terraform/OpenTofu) и Ansible.
• Настройка GitOps и управление деплоем.
• Автоматизация Azure-сервисов: VNets, App Services и база данных.
• Управление AKS, создание образов и дашбордов.

Skills

Leadership

English (B2)

DevOps

Tools

Terraform

OpenTofu

Ansible

Kubernetes

AKS

Docker

Azure DevOps

Azure

Job description

Описание

EPAM develops enterprise software products, open-source solutions, and accelerators.

Задачи

• Support the design and build-out of an internal developer platform using Backstage, including Software Catalog, Scaffolder, TechDocs, and Search
• Build multi-tenancy structures with organizational hierarchy and detailed RBAC beyond basic authentication
• Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
• Create golden path templates and self-service workflows for development teams
• Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible
• Set up GitOps workflows to manage continuous deployment and drift
• Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases
• Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards
• Develop and maintain image factory pipelines for VM and container golden images

Требования

• Over 5 years of DevOps engineering experience, with strong Terraform/OpenTofu and Ansible skills
• At least 1 year of leadership experience
• Solid understanding of Azure networking and security services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables
• Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps
• Strong knowledge of Azure databases, including Azure SQL, Cosmos DB, and Azure Postgres
• Deep expertise in Kubernetes/AKS provisioning, cluster management, operational dashboards, and Docker
• Proven skills in Azure DevOps (ADO) pipeline automation and integration
• English proficiency at B2 level or above
• Nice to have: Backstage and self-service platform design, multi-tenancy/RBAC models, GitOps tools such as ArgoCD or Flux, Identity & Access Management, Entra ID, Active Directory, Group Policy Objects, M365 groups, Secrets Management tools, Azure Key Vault, OpenBao/HashiCorp Vault, dynamic secrets, Python, Bash, PowerShell, REST API integration, DNS automation, IPAM (NetBox), observability, VMware virtualization, Azure VMware Solution, Image Factory pipelines, Venafi, Policy as Code with OPA, Privileged Access Management, DevSecOps tooling, SIEM and WAF integrations, PaloAlto, F5, Cloudflare, ITSM/CMDB integration, artifact repositories, Vulnerability Management dashboards and reporting, Documentation Automation, Solution Design Documents (SDD)

Условия

No conditions specified