Lead DevOps Engineer

EPAM Systems Inc; Newtown (PA); In loco; MXN 900.000 - 1.500.000; Tempo pieno

Vantaggi offerti da questo lavoro

Healthcare benefits

Paid time off

Learning and certification programs

Global career opportunities

Employee engagement groups

Descrizione del lavoro

EPAM Systems Inc. is seeking a Lead DevOps Engineer to run a one-person DevOps function for a multi-tenant SaaS platform in insurance and financial services.

You will support ~18 .NET microservices and an Angular SSR UI on Microsoft Azure across dev/demo/UAT/prod while enabling 30+ developers across five teams. The role emphasizes Azure services, AKS administration, IaC with ARM templates, and Azure DevOps/GitHub pipelines.

Competenze

• 5+ years DevOps experience supporting production SaaS platforms.
• Expert-level knowledge of Azure services including App Services, Application Gateway, WAF, and Azure Firewall.
• Hands-on proficiency with Azure Key Vault, Blob Storage, Azure DNS, Application Insights, and Log Analytics.
• Strong capability in AKS administration and running self-hosted build agents.
• Solid background in Infrastructure as Code using ARM templates and PowerShell.
• Demonstrated experience with Azure DevOps YAML pipelines and GitHub repository management, rulesets, and branch policies.
• Proficiency in incident analysis using Kusto and Kudu diagnostics.
• Deep understanding of layered connectivity troubleshooting for third-party integrations.
• Working knowledge of ServiceNow change management processes.
• Experience with Wiz, Invicti DAST, and SailPoint.
• Ability to handle FinOps activities including cost allocation and capacity sizing.

Mansioni

• Administer Azure services and keep CI/CD workflows running reliably.
• Develop and sustain Azure DevOps YAML pipelines and manage GitHub repositories.
• Coordinate change management and security/compliance tooling usage.
• Drive FinOps efforts including cost allocation and capacity sizing.
• Provide developer enablement through access requests and environment configuration management.
• Analyze production incidents and reduce throttling-related disruptions.

Conoscenze

Azure platform expertise

SaaS production support

Incident analysis

FinOps awareness

English proficiency

Strumenti

ARM templates

PowerShell

Azure DevOps YAML

GitHub

Kusto

Kudu diagnostics

Descrizione del lavoro

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Lead DevOps Engineer to run a one-person DevOps function for a multi-tenant SaaS platform in insurance and financial services. You will support ~18 .NET microservices and an Angular SSR UI on Microsoft Azure across dev/demo/UAT/prod in primary and DR regions while enabling 30+ developers across five teams.

Responsibilities

• Administer Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights, and Log Analytics
• Maintain AKS-hosted self-hosted build agents to keep CI/CD workflows running reliably
• Implement Infrastructure as Code with ARM templates and PowerShell via shared central pipeline templates used across approximately 20 repositories
• Develop and sustain Azure DevOps YAML pipelines, manage GitHub repositories, rulesets, and branch policies as part of the ADO-to-GitHub migration
• Resolve pipeline failures and reduce throttling-related disruptions
• Analyze production incidents using Application Insights, Kusto, and Kudu diagnostics
• Troubleshoot third-party integrations with insurers and banks across DNS, TCP, TLS, HTTP, and authentication layers, including egress and whitelisting requests and vendor escalations
• Coordinate change management through ServiceNow CHG records, implementation plans, and TCS task coordination
• Track VM vulnerability remediation with TCS based on Wiz findings, triage Invicti DAST results, and investigate WAF blocks
• Complete client security questionnaires and manage SailPoint access recertification along with PIM/Entra privileged access
• Drive FinOps efforts including Azure cost allocation per tenant and line of business, capacity sizing for large client onboardings, and infrastructure budget input
• Support developer enablement through access requests, app settings propagation across environments, and configuration drift detection

Requirements

• Proven DevOps experience of 5+ years supporting production SaaS platforms
• Expert-level knowledge of Azure services including App Services, Application Gateway, WAF, and Azure Firewall
• Hands-on proficiency with Azure Key Vault, Blob Storage, Azure DNS, Application Insights, and Log Analytics
• Strong capability in AKS administration and running self-hosted build agents
• Solid background in Infrastructure as Code using ARM templates and PowerShell
• Demonstrated experience with Azure DevOps YAML pipelines and GitHub repository management, rulesets, and branch policies
• Proficiency in incident analysis using Kusto and Kudu diagnostics
• Deep understanding of layered connectivity troubleshooting (DNS, TCP, TLS, HTTP, auth) for third-party integrations
• Working knowledge of ServiceNow change management processes
• Experience with security and compliance tooling such as Wiz, Invicti DAST, and SailPoint
• Ability to handle FinOps activities including cost allocation and capacity sizing
• Comfort using GitHub Copilot CLI agents and applying DevOps automation workflows
• English proficiency at B2+ (Upper-Intermediate) level

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.