cloud engineer for internal developer platforms

EPAM delivers a Unified Automation Platform, an Internal Developer Platform that standardizes new-project delivery, centralizes access to development resources, and enables software creation through templates and golden paths.

• Architect Infrastructure as Code modules for Azure services, databases, and Azure VMware Solution private cloud infrastructure;
• Define Azure identity architecture covering Entra ID, Active Directory, Group Policy Objects, M365 groups, service principals, app registrations, and managed identities;
• Design the Azure Kubernetes Service platform, including cluster and node-pool architecture, add-ons, tenant onboarding, and an operations dashboard;
• Collaborate with the Network Architect on Azure connectivity, security, DNS, IPAM, and ExpressRoute integration;
• Define the Image Factory architecture for Linux and Windows virtual machines and container golden images;
• Establish Infrastructure as Code Engine standards for state management, locking, RBAC, module registries, testing, drift detection, policy hooks, and secrets injection;
• Partner with the Backstage Architect to expose Azure provisioning capabilities through golden-path templates;
• Collaborate with Integration Architects on observability, ITSM/CMDB, and security integrations;
• Provide architectural governance during implementation and validate production deployments;
• Support module lifecycle ownership during adoption.

• 10+ Years of proven Azure solution or enterprise architecture experience;
• Deep expertise in Terraform/OpenTofu for Azure infrastructure automation, module design, state management, and Azure DevOps CI/CD pipelines;
• Working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs;
• Hands-on experience architecting production-scale Azure Kubernetes Service environments;
• Experience with Azure identity and access architecture, including Entra ID, Active Directory, managed identities, RBAC, and secrets integration;
• Proficiency in Ansible for VM post-provisioning and golden-image pipelines;
• Excellent command of English at B2+ level, written and spoken, with strong technical communication skills;
• Nice to have: Azure VMware Solution private cloud provisioning, certificate lifecycle management platforms such as Venafi, Backstage-based or comparable developer portals, policy-as-code engines such as OPA/Conftest and Azure Policy, large-scale multi-region Azure landing-zone or platform engineering.

• No conditions specified