devsecops engineer

EPAM Systems provides software development, digital platform engineering, and digital product design services. The company strives to provide its global team of professionals with opportunities for professional growth and cooperation across multiple countries.

• Resolve security recommendations within Microsoft Defender for Cloud and execute technical fixes to drive up the Azure Secure Score;
• Harden Azure Kubernetes Service clusters using CIS Benchmarks;
• Implement Kubernetes Network Policies to restrict pod-to-pod communication;
• Enforce identity security using Managed Identities, OIDC, and Entra ID integration;
• Manage and remediate Kubernetes YAML manifests, ensuring Pod Security Standards and resource limits are enforced;
• Secure Azure Container Registry by implementing Private Endpoints, disabling public access, and managing image signing via Content Trust;
• Set up lifecycle policies to automatically purge vulnerable or outdated container images;
• Embed security scanning into Azure DevOps CI/CD pipelines;
• Leverage Infrastructure as Code to automate the deployment of secure network patterns and NSG rules;
• Manage Network Security Groups and ASGs using the principle of least privilege;
• Deploy and manage Azure Private Links and Private Endpoints to ensure PaaS services are not exposed to the public internet;
• Remediate public access alerts by migrating resources to private networking backbones.

• 4+ Years of experience working with the Azure Cloud Platform;
• Proficiency in Microsoft Defender for Cloud, Azure WAF, and Azure Key Vault;
• Expertise in Azure Pipelines and ACR Management, including embedding automated security gates into Azure DevOps CI/CD pipelines;
• Hands-on experience with AKS and ACR security;
• Strong skills in PowerShell or Azure CLI for bulk remediation tasks;
• Understanding of VNet Peering, NSG/UDR configuration, and Private Endpoint implementation;
• Capability to write and remediate Terraform or Bicep code;
• English proficiency at a B2 level;
• Nice to have: Certifications: AZ-500, AZ-400, Familiarity with Azure CLI and Azure Pipelines, Knowledge of Bicep, Background in Terraform.

• Work on a flexible schedule remotely or from any of comfortable offices or coworking spaces in Ukraine;
• Receive the necessary equipment to perform work tasks;
• Change projects and technology stacks within EPAM;
• Gain experience in various business domains;
• Relocation support may be available for eligible candidates;
• Participate in volunteer, charity programs and communities;
• Professional growth planning, regular feedback, and free English improvement;
• Free training and certification in AWS, GCP, or Azure Clouds;
• Access to internal E-learn training program and corporate accounts on LinkedIn Learning and Get Abstract;
• Study at EPAM Solution Architecture School and leadership development programs;
• Vacation and sick leave including sick leave without a medical certificate;
• Voluntary Medical Insurance programs and medical insurance for family members at corporate rates;
• Company support during significant life events and psychological comfort support;
• E-kids program for EPAMers' children.