Lead Azure Cloud Devops Engineer

We are looking for a Lead Azure Cloud DevOps Engineer to join our team and drive the delivery of a Unified Automation Platform for our client.

The client currently provisions and configures infrastructure through a combination of manual processes, scripts, and partial automation — resulting in inconsistent deployments, security gaps, and extended delivery timelines. To address this, EPAM is delivering an Internal Developer Platform (IDP) that standardizes new-project delivery, centralizes access to development resources, and enables software creation through templates and golden paths.

Phase 1 of this engagement spans four months across Assessment & Design, Implementation, and Adoption, establishing the platform foundation with a working IDP featuring a Software Catalog, advanced scaffolding, core self-service capabilities, and priority integrations across enterprise systems. The platform supports multi-target deployment portability across Azure and on-premises VMware, with automation built on Terraform/OpenTofu for Infrastructure as Code and Ansible for Configuration as Code, complemented by AI-assisted development using GitHub Copilot as standard practice across all engineering roles.

Kindly note that this role supports remote work, but only from within Ukraine.

Responsibilities

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect
• Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster/node-pool provisioning, add-on configuration, and namespace/tenant onboarding
• Set up identity wiring and secrets integration for Azure workloads using managed identities, SPN/app registrations, Azure Key Vault, and OpenBao
• Maintain Image Factory pipelines for VM and container golden images, covering Linux and Windows/cloudbase-init baselines, CIS hardening, and image scanning
• Execute Configuration as Code playbooks using Ansible for VM post-provisioning and golden-image handoff
• Support Backstage golden-path template integration for Azure provisioning and test generated infrastructure end-to-end
• Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption
• Contribute to module testing, drift detection, and documentation according to the platform's Infrastructure as Code Engine standards
• Guide and mentor engineers within the Azure automation stream, ensuring consistent application of platform standards

Requirements

• 6+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps
• 1+ years of experience in a technical leadership role, guiding engineering teams or workstreams
• Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management
• Expertise in Azure identity constructs such as managed identities, SPN/app registrations, and secrets integration with Key Vault and dynamic secrets
• Experience with Configuration as Code using Ansible for VM post-provisioning and golden-image pipelines
• Working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs
• Combined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot as standard practice
• English level B2 or higher

Nice to have

• Experience with Azure VMware Solution (AVS) private cloud provisioning
• Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing

We offer

• With us you can:
  • Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
  • Receive the necessary equipment to perform your work tasks
  • Change projects and technology stacks within EPAM
  • Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
  • Relocation opportunities may be available for eligible candidates, depending on the role and openings at other EPAM locations
  • Participate in volunteer, charity programs and communities (both technical and interest-based)
• We focus on your professional growth:
  • You can plan your individual career path together with your manager
  • Receive regular feedback from colleagues
  • Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
  • Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
  • Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
  • Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
  • Study at EPAM Solution Architecture School with the instructors who are practicing architects
  • Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
  • Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)
• What we offer:
  • Vacation and sick leave (including a sick leave without a medical certificate)
  • A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
  • Medical insurance for family members at corporate rates
  • Company support during significant life events (childbirth or adoption, marriage, etc.)
  • Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
  • E-kids program - a free programming language training program for EPAMers' children

Kindly be advised that the set of benefits, including learning, certification, and other opportunities, may vary depending on the role you apply for. Our recruiter will be able to share more details about the specific opportunity during your general interview.

EPAM strives to provide its global team of over 62,350 professionals in more than 55 countries with opportunities for professional growth from day one of collaboration. Our colleagues are the source of EPAM's success, so we value cooperation, strive to always understand our clients' business and aim for the highest quality standards. No matter where you are, you will join a dedicated, diverse community that will help you realize your potential to the fullest.