Lead AWS DevOps Engineer- CDK & TypeScript

EPAM Systems; United States; Remote; USD 135,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

Health Savings Account

Flexible Spending Accounts

Disability Insurance

Life Insurance

Employee Assistance Program

LinkedIn learning access

401(k) Matching

Paid Time Off (15-25 days)

Paid Holidays (9)

Job summary

EPAM Systems Inc. is seeking a Lead AWS DevOps Engineer - CDK & TypeScript to design, build, and maintain robust infrastructure and CI/CD platforms across cloud environments.

You will design pipelines, manage IaC with Terraform and AWS CDK, and scale GitHub Actions runners on EKS with secure OIDC authentication. The role emphasizes deployment safety, automated rollbacks, progressive rollouts, and tooling for artifact signing and image promotion.

Qualifications

• Proficient in AWS CDK and TypeScript for cloud infra
• Experience setting up and maintaining reusable GitHub Actions workflows and OIDC authentication
• Ability to implement automated emergency rollbacks and progressive rollouts in CDK/CloudFormation
• Familiar with wave-ordered deploy-runners and artifact signing workflows

Responsibilities

• Design, build, and maintain robust CI/CD pipelines with GitHub Actions, TypeScript, and Python
• Read, analyze, and contribute to Terraform and AWS CDK definitions for infrastructure
• Scale and administer GitHub Actions platform components on AWS EKS and ARC runners
• Implement automated and emergency rollback mechanisms and bake-time gates for deployments
• Build and operate CDK/CloudFormation deploy tooling and manage Artifactory image promotion

Skills

AWS CDK & TypeScript

GitHub Actions Platform Engineering

Deployment Safety Controls

Deployment Tooling

Tools

Terraform

Artifactory

Job description

We are seeking a Lead AWS DevOps Engineer - CDK & TypeScript to design, build, and maintain robust infrastructure and CI/CD platforms, driving deployment safety, automation, and scalability across cloud environments.

Req# 1080520892

Responsibilities

• Pipeline Engineering: Design, build, and maintain robust CI/CD pipelines using GitHub Actions, TypeScript, and Python
• Infrastructure as Code (IaC) Management: Read, analyze, debug, and contribute to Terraform and AWS CDK infrastructure definitions
• Platform & Runner Administration: Engineer and scale GitHub Actions platform components, including reusable workflows, merge queues, self-hosted ARC (Actions Runner Controller) runners on Amazon EKS, and OIDC cloud authentication
• Deployment Safety & Resilience: Implement and manage automated and emergency rollback mechanisms for AWS CDK and CloudFormation (including stack teardown, fix-forward vs rollback strategies), progressive-rollout pipelines, and bake-time gating
• Artifact Management & Deployment Tooling: Build and operate CDK/CloudFormation deploy tooling (such as wave-ordered deploy-runners) and manage Artifactory image promotion and digital signing processes

Requirements

• AWS CDK & TypeScript: Strong, production-level proficiency in TypeScript and hands-on experience with AWS CDK for cloud infrastructure
• GitHub Actions Platform Engineering: Expertise in setting up and maintaining reusable workflows, merge queues, self-hosted ARC runners on EKS, and secure OIDC cloud authentication
• Deployment Safety Controls: Proven experience implementing automated/emergency rollbacks for CDK/CloudFormation and configuring progressive rollouts with bake-time gates
• Deployment Tooling & Artifacts: Familiarity with wave-ordered deploy-runners, Artifactory image promotion, and artifact signing
• Terraform: Solid, working knowledge of Terraform for infrastructure reading and debugging

We offer

• Medical, Dental and Vision Insurance (Subsidized)
• Health Savings Account
• Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)
• Short-Term and Long-Term Disability (Company Provided)
• Life and AD&D Insurance (Company Provided)
• Employee Assistance Program
• Unlimited access to LinkedIn learning solutions
• Matched 401(k) Retirement Savings Plan
• Paid Time Off – the employee will be eligible to accrue 15-25 paid days, depending on specific level and tenure with EPAM (accrual eligibility may change over time)
• Paid Holidays - nine (9) total per year
• Legal Plan and Identity Theft Protection
• Accident Insurance
• Employee Discounts
• Pet Insurance
• Employee Stock Purchase Program
• If otherwise eligible, participation in the discretionary annual bonus program
• If otherwise eligible and hired into a qualifying level, participation in the discretionary Long-Term Incentive (LTI) Program

This Remote Position Cannot be Performed in New York City.

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our clients, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

Engineer the Future with a Career at EPAM

This posting includes a good faith range of the salary EPAM would reasonably expect to pay the selected candidate. The range provided reflects base salary only. Individual compensation offers within the range are based on a variety of factors, including, but not limited to: geographic location, experience, credentials, education, training; the demand for the role; and overall business and labor market considerations. Most candidates are hired at a salary within the range disclosed. Salary range: $135,000 - $160,000. In addition, the details highlighted in this job posting above are a general description of all other expected benefits and compensation for the position.

EPAM will not provide new H-1B visa sponsorship for this position. Candidates with existing transferable H-1B status may be considered.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.