Senior Cloud & Infrastructure Engineer (Azure & Terraform)

EPAM Systems; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

EPAM Systems is seeking a senior Infrastructure Engineer with deep expertise in Azure Cloud architecture and production-grade Terraform development. You will own the creation, modification, and maintenance of cloud infrastructure using Infrastructure-as-Code (IaC) principles.

You will partner with cross-functional teams to design Azure Landing Zones, hub-and-spoke topologies, and secure networking, while ensuring governance, security, and documentation as code.

Qualifications

• Ability to write and improve Terraform modules from the ground up with a focus on validation, optimization, reusability, and backward compatibility.
• Proven capability to troubleshoot complex pipeline runs and handle state modifications (basic resource management is not sufficient).
• Deep understanding of secure, production-ready IaC creation.
• Extensive hands-on experience with Azure Landing Zone concepts.
• Advanced Azure networking implementation (Hub-and-Spoke, Private DNS, Service/Private Endpoints at scale).
• Comprehensive Azure Identity and Access Management expertise (Entra ID, Managed Identities, Federated Credentials, OIDC, App Registrations, and Service Principals).
• Client-Oriented & Proactive: Strong consultative mindset with the ability to lead work and drive conversations with stakeholders rather than waiting for instructions.
• Collaborative: Excellent partnering skills across cross-functional teams.
• Documentation Advocate: Committed to maintaining clean documentation and mentoring team members.

Responsibilities

• Infrastructure Provisioning & Management: Hands-on creation and modification of Azure infrastructure using modular Terraform, including complex Terraform state modifications.
• Architecture & Networking: Design and implement Azure Landing Zones, hub-and-spoke topologies, Azure networking (Private DNS, Service Endpoints, Private Endpoints at scale), and robust Identity & Access Management (Entra ID, Managed Identities, Federated Credentials, OIDC, App Registrations, Service Principals).
• AI-Assisted Development Governance: Leverage AI tools to accelerate development while acting as the technical authority—setting the right context, validating outputs against corporate standards, and ensuring solutions go beyond generic AI templates.
• Security & Compliance: Ensure all IaC creation strictly conforms to security guardrails, compliance frameworks, and industry best practices.
• Collaboration & Leadership: Act as a trusted technical advisor to cross-functional teams and stakeholders, leading conversations and driving technical direction.
• Documentation & Knowledge Sharing: Champion Documentation-as-Code (DaC) practices and foster a collaborative environment through active knowledge sharing.

Skills

Terraform

Azure

IaC

Landing Zones

Networking

IAM

Tools

Terraform

Job description

We are looking for a senior-level Infrastructure Engineer with deep expertise in Azure Cloud architecture and production-grade Terraform development.

You will own the creation, modification, and maintenance of cloud infrastructure using robust Infrastructure-as-Code (IaC) principles.

Req# 1084862013

Responsibilities

• Infrastructure Provisioning & Management: Hands-on creation and modification of Azure infrastructure using modular Terraform, including complex Terraform state modifications
• Architecture & Networking: Design and implement Azure Landing Zones, hub-and-spoke topologies, Azure networking (Private DNS, Service Endpoints, Private Endpoints at scale), and robust Identity & Access Management (Entra ID, Managed Identities, Federated Credentials, OIDC, App Registrations, Service Principals)
• AI-Assisted Development Governance: Leverage AI tools to accelerate development while acting as the technical authority—setting the right context, validating outputs against corporate standards, and ensuring solutions go beyond generic AI templates
• Security & Compliance: Ensure all IaC creation strictly conforms to security guardrails, compliance frameworks, and industry best practices
• Collaboration & Leadership: Act as a trusted technical advisor to cross-functional teams and stakeholders, leading conversations and driving technical direction
• Documentation & Knowledge Sharing: Champion Documentation-as-Code (DaC) practices and foster a collaborative environment through active knowledge sharing

Requirements

• Ability to write and improve Terraform modules from the ground up with a focus on validation, optimization, reusability, and backward compatibility
• Proven capability to troubleshoot complex pipeline runs and handle state modifications (basic resource management is not sufficient)
• Deep understanding of secure, production-ready IaC creation
• Extensive hands-on experience with Azure Landing Zone concepts
• Advanced Azure networking implementation (Hub-and-Spoke, Private DNS, Service/Private Endpoints at scale)
• Comprehensive Azure Identity and Access Management expertise (Entra ID, Managed Identities, Federated Credentials, OIDC, App Registrations, and Service Principals)
• Client-Oriented & Proactive: Strong consultative mindset with the ability to lead work and drive conversations with stakeholders rather than waiting for instructions
• Collaborative: Excellent partnering skills across cross-functional teams
• Documentation Advocate: Committed to maintaining clean documentation and mentoring team members