devops engineer in Azure infrastructure

EPAM provides enterprise software products, open source solutions, and technology accelerators through EPAM SolutionsHub.

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres according to Azure Architect designs;
• Build and operate the Azure Kubernetes Service (AKS) platform, including cluster and node-pool provisioning, add-on configuration, and namespace and tenant onboarding;
• Implement identity wiring with managed identities and SPN/app registrations, plus secrets integration for Azure workloads;
• Build and maintain Image Factory pipelines for Linux and Windows VM and container golden images, including CIS hardening and image scanning;
• Execute Ansible Configuration as Code playbooks for VM post-provisioning and golden-image handoff;
• Support Backstage golden-path template integration for Azure provisioning and test generated infrastructure end-to-end;
• Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption;
• Contribute to module testing, drift detection, and documentation according to the platform's Infrastructure as Code Engine standards.

• 3+ Years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps;
• Production experience operating Azure Kubernetes Service (AKS) clusters, including networking, policy, and namespace management;
• Experience with Azure identity constructs, including managed identities and SPN/app registrations, and secrets integration;
• Experience with Ansible Configuration as Code for VM post-provisioning and golden-image pipelines;
• Working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs;
• Combined proficiency as a Terraform IaC and Ansible CaC developer, using GitHub Copilot with AI assistance as standard practice;
• English proficiency at B2 level or higher;
• Nice to have: Experience with Azure VMware Solution (AVS) private cloud provisioning, familiarity with image hardening and scanning tooling, Shared Image Gallery publishing.

• Remote work is available in Belarus.