cloud engineer in infrastructure automation

EPAM delivers a Unified Automation Platform, an Internal Developer Platform that standardizes secure and repeatable infrastructure delivery across Azure and on-premises VMware using templates and golden paths.

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres according to Azure Architect designs;
• Build and operate the Azure Kubernetes Service platform, including cluster and node-pool provisioning, add-on configuration, and namespace and tenant onboarding;
• Implement identity wiring and secrets integration for Azure workloads;
• Build and maintain Image Factory pipelines for VM and container golden images;
• Execute Ansible Configuration as Code playbooks for VM post-provisioning and golden-image handoff;
• Support Backstage golden-path template integration for Azure provisioning and test generated infrastructure end-to-end;
• Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption;
• Contribute to module testing, drift detection, and documentation according to the platform's Infrastructure as Code Engine standards.

• 5+ Years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps;
• At least 1 year of relevant leadership experience;
• Experience operating Azure Kubernetes Service clusters in production, including networking, policy, and namespace management;
• Experience with Azure identity constructs and secrets integration;
• Experience with Ansible Configuration as Code for VM post-provisioning and golden-image pipelines;
• Working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs;
• Combined proficiency as a Terraform IaC and Ansible CaC developer, using GitHub Copilot as standard practice;
• Excellent written and spoken English at B2+ level;
• Nice to have: experience with Azure VMware Solution private cloud provisioning, familiarity with image hardening and scanning tooling, Shared Image Gallery publishing.

• Remote work is available in Belarus.