Remote: Lead AWS DevOps Engineer - CDK & TypeScript

EPAM Systems; United States; Remote; USD 135,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance (

Health Savings Account

Flexible Spending Accounts

Short-Term and Long-Term Disability

Life and AD&D Insurance

Employee Assistance Program

401(k) Retirement Savings Plan with %

Job summary

EPAM Systems, Inc. seeks a Lead AWS DevOps Engineer to design, build, and maintain robust CI/CD platforms and infrastructure across cloud environments.

The role emphasizes automation, deployment safety, and scalable pipelines using CDK/TypeScript, Terraform, and GitHub Actions. The candidate will scale an internal GitHub Actions platform with self-hosted ARC runners on Amazon EKS and implement bake-time gates, automated rollbacks, and secure authentication via OIDC.

Qualifications

• Production-level proficiency in TypeScript and AWS CDK.
• Hands-on experience with GitHub Actions Platform Engineering.
• Experience designing and maintaining CI/CD pipelines and IaC.
• Knowledge of Terraform and CloudFormation for infra definitions.

Responsibilities

• Design, build, and maintain robust CI/CD pipelines using GitHub Actions, TypeScript, and Python.
• Engineer and scale GitHub Actions platform components, including ARC runners on EKS.
• Implement automated and emergency rollback mechanisms for CDK/CloudFormation.
• Manage wave-ordered deploy tooling and artifact signing with Artifactory.

Skills

TypeScript

AWS CDK

GitHub Actions

Terraform

CloudFormation

EKS

OIDC

CI/CD design

Tools

Artifactory

ARC runners

Self-hosted GitHub Actions runners

OIDC authentication tooling

Job description

EPAM Systems, Inc. seeks a Lead AWS DevOps Engineer to design, build, and maintain robust CI/CD platforms and infrastructure across cloud environments.

The role emphasizes automation, deployment safety, and scalable pipelines using CDK/TypeScript, Terraform, and GitHub Actions. The candidate will scale an internal GitHub Actions platform with self-hosted ARC runners on Amazon EKS and implement bake-time gates, automated rollbacks, and secure authentication via OIDC.