Lead Cloud Engineer

<img src="https://we-work-remotely.imgix.net/logos/0171/6497/logo.gif?ixlib=rails-4.0.0&w=50&h=50&dpr=2&fit=fill&auto=compress" /> <p> <strong>Headquarters:</strong> Belarus <br /><strong>URL:</strong> <a href="http://epam.com">http://epam.com</a> </p> <div><p>We are looking for a<strong> Lead Cloud Engineer</strong> to join our innovative team.</p><p>We are delivering a Unified Automation Platform (Internal Developer Platform) to standardize secure, repeatable infrastructure delivery across Azure and on-premises VMware using templates and golden paths. You will lead Azure automation and AKS operations and strengthen IaC/CaC engineering practices. Apply to help teams ship faster with consistent, compliant deployments.</p><h3>Responsibilities</h3><ul><li>Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect</li><li>Build and operate the Azure Kubernetes Service (AKS) platform day-to-day: cluster/node-pool provisioning, add-on configuration (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboarding</li><li>Implement identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao) for Azure workloads</li><li>Build and maintain Image Factory pipelines for VM and container golden images (Linux and Windows/cloudbase-init baselines, CIS hardening, image scanning)</li><li>Execute Configuration as Code (Ansible) playbooks for VM post-provisioning and golden-image handoff</li><li>Support Backstage golden-path template integration for Azure provisioning, testing generated infrastructure end-to-end</li><li>Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption</li><li>Contribute to module testing, drift detection, and documentation per the platform's Infrastructure as Code Engine standards</li></ul><h3>Requirements</h3><ul><li>5+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment (Azure DevOps)</li><li>At least 1 year of relevant leadership experience</li><li>Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management</li><li>Experience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)</li><li>Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelines</li><li>Working knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with the network foundation owned by the Network Architect</li><li>Combined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot (provided project-wide) as standard practice</li><li>Excellent command of written and spoken English (B2+ level)</li></ul><h3>Nice to have</h3><ul><li>Experience with Azure VMware Solution (AVS) private cloud provisioning</li><li>Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing</li></ul></div> <p><strong>To apply:</strong> <a href="https://weworkremotely.com/remote-jobs/epam-systems-lead-cloud-engineer">https://weworkremotely.com/remote-jobs/epam-systems-lead-cloud-engineer</a></p>