Lead Go Software Engineer (Platform / Orchestration)

EPAM Systems; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

EPAM Systems Inc. seeks a Lead Software Engineer to own the end-to-end install architecture and a Go-based orchestration engine spanning validation, actuation with dry-run/policy gates, and evidence generation.

You will lead platform work across Terraform, Terragrunt-style IAM/bootstrap, kOps, Helmfile, and Kubernetes day-2 operations, ensuring multi-account delivery and safe deployment practices.

Qualifications

• 5+ years of Go development including CLI and HTTP services.
• Strong Terraform and Terragrunt-style IAM/bootstrap experience.
• Proficiency with Helmfile and Kubernetes day-2 operations.
• Experience with multi-account AssumeRole and AWS IAM workflows.
• Familiarity with OpenAPI-aligned automation APIs and decide-vs-execute patterns.
• Ability to build reusable GitHub Actions workflows and IRSA/ECR wiring.
• Clear English communication for technical handoffs.

Responsibilities

• Own end-to-end install architecture and the Go orchestration engine.
• Lead platform work across Terraform, Terragrunt IAM, kOps, Helmfile, and Kubernetes.
• Orchestrate multi-account delivery with config contracts and rollback.
• Develop reusable CI pipelines with GitHub Actions runners and image-sync wiring.
• Design automation APIs aligned to OpenAPI and governance patterns.
• Maintain clear handoffs and production software engineering practices.

Skills

Go

CLI service

Terraform

Terragrunt

Kubernetes

Helmfile

OpenAPI

GitHub Actions

IRSA

ECR

multi-account IAM

image syncing

Tools

Terraform CLI

kOps

Job description

We are seeking a Lead Software Engineer (Platform / Orchestration) to own the end-to-end install architecture and the Go orchestration engine spanning Validate, Actuate with dry-run/policy gates, and Evidence stages, while providing technical leadership across a team of three engineers.

Responsibilities

• Own the end-to-end install architecture and the Go orchestration engine, including validation, actuation with dry-run/policy gates, and evidence generation
• Lead and review platform work across Terraform, Terragrunt-style IAM/bootstrap, kOps, Helmfile, Kubernetes day-2 operations, and multi-account AssumeRole, without necessarily authoring every layer
• Orchestrate blank-account delivery, including config contracts, rollback/teardown, and kill-switch / safe-stop mechanisms
• Build the first healthy application pipeline, including reusable GHA workflows, runners, IRSA, and ECR with image-sync wiring
• Design OpenAPI-aligned automation APIs and decide-vs-execute patterns
• Prioritize work across platform, backend, and media domains to keep the pod sequenced
• Follow production software engineering practices across repos and runbooks
• Use daily AI coding assistants such as Cursor or Claude Code with careful review of code and IaC
• Work from real GitHub Enterprise repos without inventing paths or cloud facts
• Apply IaC change control through plan, dual approve/sign, and apply via the org-approved Terraform CLI workflow, avoiding freestyle apply
• Maintain the deploy path through GitHub Actions reusable workflows, self-hosted runners, and IRSA as the primary model
• Provide clear English communication for handoffs

Requirements

• 5+ years of experience with Go, including CLI and HTTP service development, multi-step waves, concurrency, idempotent flows, and evidence/smoke outputs
• Expertise in Terraform via approved CLI workflow, Terragrunt-style IAM/bootstrap, and kOps
• Proficiency in Helmfile, Kubernetes day-2 operations, and multi-account AssumeRole
• Background in building reusable GHA workflows, runners, IRSA, and ECR with image-sync wiring
• Knowledge of OpenAPI-aligned automation APIs and decide-vs-execute patterns
• Skills in prioritizing across platform, backend, and media workstreams
• Familiarity with daily AI coding assistants such as Cursor or Claude Code, with careful review of code and IaC
• Understanding of IaC change control processes, including plan, dual approve/sign, and apply workflows
• Competency in clear English communication for technical handoffs

Nice to have

• Knowledge of observability practices
• Background in multi-tenant SaaS install environments