Senior DevOps Engineer

EPAM Systems is a global provider of digital platform engineering and development services. The Senior DevOps Engineer will lead the design and delivery of a unified automation platform, driving infrastructure automation, cloud provisioning, security integration, observability, and self-service platform engineering.

Responsibilities:

• Assist with design and implementation of an internal developer platform using Backstage (Software Catalogue, Scaffolder, TechDocs, Search)
• Establish multi-tenancy models with org hierarchy and granular RBAC beyond basic authentication
• Integrate Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
• Define golden path templates and self-service workflows for development teams
• Deliver Infrastructure as Code using Terraform/OpenTofu and Configuration as Code using Ansible
• Implement GitOps workflows for continuous deployment and drift management
• Automate provisioning and management of Azure services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)
• Lead Kubernetes (AKS) provisioning, cluster management, and operational dashboards
• Build and maintain image factory pipelines for VM and container golden images

Requirements:

• 3+ years of experience as a DevOps Engineer, with expertise in Terraform / OpenTofu and Ansible
• Knowledge of Azure networking and security services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables
• Experience with Azure compute services: App Services, Container Apps, and Function Apps
• Proficiency in Azure databases: Azure SQL, Cosmos DB, and Azure Postgres
• Expertise in Kubernetes / AKS provisioning, cluster management, ops dashboards, and Docker
• Skills in Azure DevOps (ADO) pipeline automation and integration
• English proficiency at B2 level or higher
• Familiarity with Backstage (developer portals, plugins, Scaffolder, TechDocs, Software Catalog, Search), self-service platform design, multi-tenancy and granular RBAC models
• Knowledge of GitOps tools such as ArgoCD / Flux, continuous deployment, and drift management
• Background in Identity & Access management: Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, RBAC
• Experience with Secrets Management: Azure Key Vault, OpenBao / HashiCorp Vault, dynamic secrets
• Skills in scripting and automation: Python, Bash, PowerShell, REST API integration
• Familiarity with networking tools: DNS automation, IPAM (NetBox)
• Understanding of observability practices: monitoring, metrics, logging, basic observability tooling
• Knowledge of virtualization (VMware): vSphere, vSAN, NSX-T, SRM, DRS
• Experience with Azure VMware Solution (AVS): hybrid/on-prem workload management
• Expertise in Image Factory: VM and container golden image pipelines
• Knowledge of Certificate Management: Venafi
• Experience with Policy as Code: OPA / policy engine implementation
• Familiarity with Privileged Access Management (PAM): break-the-glass integration
• Knowledge of DevSecOps Tooling: SAST, DAST, SCA, IAST, ASPM integration
• Experience with Security Alerting: SIEM & WAF alert integration
• Familiarity with Firewalls: PaloAlto, F5, Cloudflare
• Knowledge of ITSM / CMDB Integration: component request workflows, artifact repositories
• Experience with Vulnerability Management: vulnerability dashboards and reporting
• Skills in Documentation Automation: Solution Design Document (SDD) generation