We are looking for a
Senior DevOps Engineer to join our team and drive the implementation and operation of our Azure infrastructure platform, working across Terraform/OpenTofu, Kubernetes, and Configuration as Code to deliver reliable, scalable cloud environments.
Responsibilities
- Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect
- Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster/node-pool provisioning, add-on configuration (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboarding
- Implement identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao) for Azure workloads
- Build and maintain Image Factory pipelines for VM and container golden images (Linux and Windows/cloudbase-init baselines, CIS hardening, image scanning)
- Execute Configuration as Code (Ansible) playbooks for VM post-provisioning and golden-image handoff
- Support Backstage golden-path template integration for Azure provisioning, testing generated infrastructure end-to-end
- Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption
- Contribute to module testing, drift detection, and documentation per the platform's Infrastructure as Code Engine standards
Requirements
- 3+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps
- Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management
- Experience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)
- Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelines
- Working knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with the network foundation owned by the Network Architect
- Combined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot (provided project-wide) as standard practice
- English proficiency at B2 level or higher
Nice to have
- Experience with Azure VMware Solution (AVS) private cloud provisioning
- Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing
We offer
- Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
- Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI and other emerging technologies
- World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
- Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
- GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
- Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.