cloud engineer in internal developer platforms

EPAM delivers a Unified Automation Platform, an Internal Developer Platform that standardizes secure and repeatable infrastructure delivery across Azure and on-premises VMware through templates and golden paths.

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect;
• Build and operate the Azure Kubernetes Service (AKS) platform day to day, including cluster and node-pool provisioning, add-on configuration, and namespace and tenant onboarding;
• Implement identity wiring and secrets integration for Azure workloads;
• Build and maintain Image Factory pipelines for VM and container golden images, including Linux and Windows/cloudbase-init baselines, CIS hardening, and image scanning;
• Execute Ansible Configuration as Code playbooks for VM post-provisioning and golden-image handoff;
• Support Backstage golden-path template integration for Azure provisioning and test generated infrastructure end to end;
• Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption;
• Contribute to module testing, drift detection, and documentation according to the platform's Infrastructure as Code Engine standards.

• 5+ Years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps;
• At least 1 year of relevant leadership experience;
• Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management;
• Experience with Azure identity constructs and secrets integration, including managed identities, SPN/app registrations, Key Vault, and dynamic secrets;
• Experience with Configuration as Code using Ansible for VM post-provisioning and golden-image pipelines;
• Working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs, sufficient to integrate with the network foundation owned by the Network Architect;
• Combined proficiency as a Terraform IaC and Ansible CaC developer, using GitHub Copilot as a standard project-wide practice;
• Excellent written and spoken English at B2+ level;
• Nice to have: Experience with Azure VMware Solution (AVS) private cloud provisioning, familiarity with image hardening and scanning tooling, Shared Image Gallery publishing.

• Remote work in Belarus.