Senior Azure Cloud DevOps Engineer

We're seeking a Senior Azure Cloud DevOps Engineer to join our team and lead the delivery of a Unified Automation Platform for our client. Currently, the client relies on a mix of manual processes, scripts, and partial automation to provision and configure infrastructure, leading to inconsistent deployments, security gaps, and longer delivery timelines. To solve this, EPAM is building an Internal Developer Platform (IDP) that standardizes how new projects are delivered, centralizes access to development resources, and enables software creation via templates and golden paths. The engagement's first phase runs for four months and covers Assessment & Design, Implementation, and Adoption, laying the platform foundation with a working IDP that includes a Software Catalog, advanced scaffolding, core self-service capabilities, and priority integrations across enterprise systems. The platform enables multi-target deployment portability across Azure and on-premises VMware, with automation powered by Terraform/OpenTofu for Infrastructure as Code and Ansible for Configuration as Code, alongside AI-assisted development using GitHub Copilot as a standard practice across all engineering roles. Responsibilities Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect Build and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster/node-pool provisioning, add-on configuration, and namespace/tenant onboarding Configure identity wiring and secrets integration for Azure workloads using managed identities, SPN/app registrations, Azure Key Vault, and OpenBao Maintain Image Factory pipelines for VM and container golden images, covering Linux and Windows/cloudbase-init baselines, CIS hardening, and image scanning Run Configuration as Code playbooks using Ansible for VM post-provisioning and golden-image handoff Support Backstage golden-path template integration for Azure provisioning and test generated infrastructure end-to-end Troubleshoot and resolve production issues across Azure automation modules during Implementation and Adoption Contribute to module testing, drift detection, and documentation in line with the platform's Infrastructure as Code Engine standards Mentor and guide engineers within the Azure automation stream to ensure consistent application of platform standards Requirements 5+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOps Proven experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management Strong expertise in Azure identity constructs such as managed identities, SPN/app registrations, and secrets integration with Key Vault and dynamic secrets Hands-on experience with Configuration as Code using Ansible for VM post-provisioning and golden-image pipelines Solid working knowledge of Azure networking constructs, including VNets, private endpoints, and NSGs Combined skill set as a Terraform (IaC) and Ansible (CaC) developer, with AI-assisted workflows using GitHub Copilot as standard practice English proficiency at B2 level or higher Nice to have Experience provisioning Azure VMware Solution (AVS) private cloud Familiarity with image hardening/scanning tools and Shared Image Gallery publishing