devops engineer in Azure infrastructure

EPAM develops enterprise software products, open source solutions, and accelerators through EPAM SolutionsHub.

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres according to Azure Architect designs;
• Build and operate the Azure Kubernetes Service (AKS) platform, including cluster and node-pool provisioning, add-on configuration, and namespace or tenant onboarding;
• Implement identity wiring with managed identities and SPN/app registrations, and integrate secrets for Azure workloads;
• Build and maintain Image Factory pipelines for Linux and Windows VM and container golden images, including CIS hardening and image scanning;
• Execute Ansible Configuration as Code playbooks for VM post-provisioning and golden-image handoff;
• Support Backstage golden-path template integration for Azure provisioning and test generated infrastructure end-to-end;
• Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption;
• Contribute to module testing, drift detection, and documentation according to the platform's Infrastructure as Code Engine standards.

• 3+ Years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps;
• Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management;
• Experience with Azure identity constructs, including managed identities and SPN/app registrations, and secrets integration;
• Experience with Configuration as Code using Ansible for VM post-provisioning and golden-image pipelines;
• Working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs, sufficient to integrate with the network foundation owned by the Network Architect;
• Combined proficiency as a Terraform IaC and Ansible CaC developer, using GitHub Copilot with AI assistance as standard practice;
• English proficiency at B2 level or higher;
• Nice to have: Experience with Azure VMware Solution (AVS) private cloud provisioning, familiarity with image hardening and scanning tooling, Shared Image Gallery publishing.

• Remote work is available in Belarus.