devops engineer in platform engineering

EPAM develops enterprise software products, open source solutions, and accelerators.

• Support the design and build-out of an internal developer platform using Backstage, including Software Catalog, Scaffolder, TechDocs, and Search;
• Build multi-tenancy structures with organizational hierarchy and detailed RBAC;
• Connect Azure DevOps for CI/CD pipelines, announcements, and notifications;
• Create golden path templates and self-service workflows for development teams;
• Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible;
• Set up GitOps workflows to manage continuous deployment and drift;
• Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases;
• Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards;
• Develop and maintain image factory pipelines for VM and container golden images.

• Over 5 years of DevOps engineering experience with strong Terraform/OpenTofu and Ansible skills;
• At least 1 year of leadership experience;
• Solid understanding of Azure networking and security services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables;
• Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps;
• Strong knowledge of Azure databases, including Azure SQL, Cosmos DB, and Azure Postgres;
• Deep expertise in Kubernetes/AKS provisioning, cluster management, operational dashboards, and Docker;
• Proven skills in Azure DevOps pipeline automation and integration;
• English proficiency at B2 level or above;
• Nice to have: Backstage and self-service platform design, multi-tenancy and RBAC models, GitOps tools such as ArgoCD or Flux, Identity & Access Management, Secrets Management, Python, Bash, PowerShell, REST API integration, DNS automation, IPAM, observability, VMware virtualization, Azure VMware Solution, image factory pipelines, certificate management, Policy as Code, Privileged Access Management, DevSecOps tooling, SIEM and WAF integrations, PaloAlto, F5, Cloudflare, ITSM/CMDB integration, vulnerability management dashboards and reporting, documentation automation and Solution Design Documents.

• No conditions specified