Lead AWS DevOps Engineer- CDK & TypeScript

EPAM Systems Inc; United States; Remote; USD 135,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance (

Health Savings Account

Flexible Spending Accounts

Short-Term and Long-Term Disability

Life and AD&D Insurance

Employee Assistance Program

401(k) Retirement Savings Plan with %

Job summary

EPAM Systems, Inc. seeks a Lead AWS DevOps Engineer to design, build, and maintain robust CI/CD platforms and infrastructure across cloud environments.

The role emphasizes automation, deployment safety, and scalable pipelines using CDK/TypeScript, Terraform, and GitHub Actions. The candidate will scale an internal GitHub Actions platform with self-hosted ARC runners on Amazon EKS and implement bake-time gates, automated rollbacks, and secure authentication via OIDC.

Qualifications

• Production-level proficiency in TypeScript and AWS CDK.
• Hands-on experience with GitHub Actions Platform Engineering.
• Experience designing and maintaining CI/CD pipelines and IaC.
• Knowledge of Terraform and CloudFormation for infra definitions.

Responsibilities

• Design, build, and maintain robust CI/CD pipelines using GitHub Actions, TypeScript, and Python.
• Engineer and scale GitHub Actions platform components, including ARC runners on EKS.
• Implement automated and emergency rollback mechanisms for CDK/CloudFormation.
• Manage wave-ordered deploy tooling and artifact signing with Artifactory.

Skills

TypeScript

AWS CDK

GitHub Actions

Terraform

CloudFormation

EKS

OIDC

CI/CD design

Tools

Artifactory

ARC runners

Self-hosted GitHub Actions runners

OIDC authentication tooling

Job description

We are seeking a Lead AWS DevOps Engineer - CDK & TypeScript to design, build, and maintain robust infrastructure and CI/CD platforms, driving deployment safety, automation, and scalability across cloud environments.Req# 1080520892ResponsibilitiesPipeline Engineering: Design, build, and maintain robust CI/CD pipelines using GitHub Actions, TypeScript, and PythonInfrastructure as Code (IaC) Management: Read, analyze, debug, and contribute to Terraform and AWS CDK infrastructure definitionsPlatform & Runner Administration: Engineer and scale GitHub Actions platform components, including reusable workflows, merge queues, self-hosted ARC (Actions Runner Controller) runners on Amazon EKS, and OIDC cloud authenticationDeployment Safety & Resilience: Implement and manage automated and emergency rollback mechanisms for AWS CDK and CloudFormation (including stack teardown, fix-forward vs rollback strategies), progressive-rollout pipelines, and bake-time gatingArtifact Management & Deployment Tooling: Build and operate CDK/CloudFormation deploy tooling (such as wave-ordered deploy-runners) and manage Artifactory image promotion and digital signing processesRequirementsAWS CDK & TypeScript: Strong, production-level proficiency in TypeScript and hands-on experience with AWS CDK for cloud infrastructureGitHub Actions Platform Engineering: Expertise in setting up and maintaining reusable workflows, merge queues, self-hosted ARC runners on EKS, and secure OIDC cloud authenticationDeployment Safety Controls: Proven experience implementing automated/emergency rollbacks for CDK/CloudFormation and configuring progressive rollouts with bake-time gatesDeployment Tooling & Artifacts: Familiarity with wave-ordered deploy-runners, Artifactory image promotion, and artifact signingTerraform: Solid, working knowledge of Terraform for infrastructure reading and debuggingWe offerMedical, Dental and Vision Insurance (Subsidized)Health Savings AccountFlexible Spending Accounts (Healthcare, Dependent Care, Commuter)Short-Term and Long-Term Disability (Company Provided)Life and AD&D Insurance (Company Provided)Employee Assistance ProgramUnlimited access to LinkedIn learning solutionsMatched 401(k) Retirement Savings PlanPaid Time Off – the employee will be eligible to accrue 15-25 paid days, depending on specific level and tenure with EPAM (accrual eligibility may change over time)Paid Holidays - nine (9) total per yearLegal Plan and Identity Theft ProtectionAccident InsuranceEmployee DiscountsPet InsuranceEmployee Stock Purchase ProgramIf otherwise eligible, participation in the discretionary annual bonus programIf otherwise eligible and hired into a qualifying level, participation in the discretionary Long-Term Incentive (LTI) ProgramThis Remote Position Cannot be Performed in New York City.EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our clients, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.Engineer the Future with a Career at EPAMThis posting includes a good faith range of the salary EPAM would reasonably expect to pay the selected candidate. The range provided reflects base salary only. Individual compensation offers within the range are based on a variety of factors, including, but not limited to: geographic location, experience, credentials, education, training; the demand for the role; and overall business and labor market considerations. Most candidates are hired at a salary within the range disclosed. Salary range: $135,000 - $160,000. In addition, the details highlighted in this job posting above are a general description of all other expected benefits and compensation for the position.Applications will be accepted on a rolling basis.In accordance with the LA County Fair Chance Ordinance, you may find a copy of the Notice containing a summary of the Ordinance’s key provisions here: Concept FCO Posting 8 27 24 (lacounty.gov)EPAM will not provide new H-1B visa sponsorship for this position. Candidates with existing transferable H-1B status may be considered.It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.