EPAM Systems
Senior DevOps Engineer - Azure
- Compensation
- Not disclosed
- Location
- Armenia, Georgia, Kazakhstan, Kyrgyzstan, Uzbekistan
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Devops
- Posted
Skills
Must have
- 3+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps
- Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management
- Experience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)
- Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelines
- Working knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with the network foundation owned by the Network Architect
- Combined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot (provided project-wide) as standard practice
- English proficiency at B2 level or higher
Nice to have
- Experience with Azure VMware Solution (AVS) private cloud provisioning
- Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing
Full description
We are looking for a Senior DevOps Engineer to join our team and drive the implementation and operation of our Azure infrastructure platform, working across Terraform/OpenTofu, Kubernetes, and Configuration as Code to deliver reliable, scalable cloud environments.
Responsibilities
- Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect
- Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster/node-pool provisioning, add-on configuration (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboarding
- Implement identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao) for Azure workloads
- Build and maintain Image Factory pipelines for VM and container golden images (Linux and Windows/cloudbase-init baselines, CIS hardening, image scanning)
- Execute Configuration as Code (Ansible) playbooks for VM post-provisioning and golden-image handoff
- Support Backstage golden-path template integration for Azure provisioning, testing generated infrastructure end-to-end
- Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption
- Contribute to module testing, drift detection, and documentation per the platform's Infrastructure as Code Engine standards
Requirements
- 3+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps
- Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management
- Experience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)
- Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelines
- Working knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with the network foundation owned by the Network Architect
- Combined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot (provided project-wide) as standard practice
- English proficiency at B2 level or higher
Nice to have
- Experience with Azure VMware Solution (AVS) private cloud provisioning
- Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing
Benefits
We connect like-minded people
- Delivering innovative solutions to industry leaders, making a global impact