Lead Azure Cloud Devops Engineer

We are looking for a Lead Azure Cloud DevOps Engineer to join our team and drive the delivery of a Unified Automation Platform for our client.

The client currently provisions and configures infrastructure through a combination of manual processes, scripts, and partial automation — resulting in inconsistent deployments, security gaps, and extended delivery timelines. To address this, EPAM is delivering an Internal Developer Platform (IDP) that standardizes new-project delivery, centralizes access to development resources, and enables software creation through templates and golden paths.

Phase 1 of this engagement spans four months across Assessment & Design, Implementation, and Adoption, establishing the platform foundation with a working IDP featuring a Software Catalog, advanced scaffolding, core self-service capabilities, and priority integrations across enterprise systems. The platform supports multi-target deployment portability across Azure and on-premises VMware, with automation built on Terraform/OpenTofu for Infrastructure as Code and Ansible for Configuration as Code, complemented by AI-assisted development using GitHub Copilot as standard practice across all engineering roles.

Responsibilities

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect
• Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster/node-pool provisioning, add-on configuration, and namespace/tenant onboarding
• Set up identity wiring and secrets integration for Azure workloads using managed identities, SPN/app registrations, Azure Key Vault, and OpenBao
• Maintain Image Factory pipelines for VM and container golden images, covering Linux and Windows/cloudbase-init baselines, CIS hardening, and image scanning
• Execute Configuration as Code playbooks using Ansible for VM post-provisioning and golden-image handoff
• Support Backstage golden-path template integration for Azure provisioning and test generated infrastructure end-to-end
• Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption
• Contribute to module testing, drift detection, and documentation according to the platform's Infrastructure as Code Engine standards
• Guide and mentor engineers within the Azure automation stream, ensuring consistent application of platform standards

Requirements

• 6+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps
• 1+ years of experience in a technical leadership role, guiding engineering teams or workstreams
• Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management
• Expertise in Azure identity constructs such as managed identities, SPN/app registrations, and secrets integration with Key Vault and dynamic secrets
• Experience with Configuration as Code using Ansible for VM post-provisioning and golden-image pipelines
• Working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs
• Combined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot as standard practice
• English level B2 or higher

Nice to have

• Experience with Azure VMware Solution (AVS) private cloud provisioning
• Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing

Benefits

With us you can:

• Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
• Receive the necessary equipment to perform your work tasks
• Change projects and technology stacks within EPAM
• Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
• Relocation opportunities may be available for eligible candidates, depending on the role and openings at other EPAM locations
• Participate in volunteer, charity programs and communities (both technical and interest-based)

We focus on your professional growth:

• You can plan your individual career path together with your manager
• Receive regular feedback from colleagues
• Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
• Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
• Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
• Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
• Study at EPAM Solution Architecture School with the instructors who are practicing architects
• Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
• Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)

What we offer:

• Vacation and sick leave (including a sick leave without a medical certificate)
• A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
• Medical insurance for family members at corporate rates
• Company support during significant life events (childbirth or adoption, marriage, etc.)
• Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
• E-kids program - a free programming language training program for EPAMers' children