Lead DevOps Engineer

We're looking for a skilled Lead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation.

Responsibilities

• Support the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)
• Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authentication
• Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
• Create golden path templates and self-service workflows for development teams
• Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible
• Set up GitOps workflows to manage continuous deployment and drift
• Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)
• Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards
• Develop and maintain image factory pipelines for VM and container golden images

Requirements

• Over 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and Ansible
• At least 1 year of leadership experience
• Solid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables
• Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps
• Strong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure Postgres
• Deep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and Docker
• Proven skills in Azure DevOps (ADO) pipeline automation and integration
• English proficiency at B2 level or above

Nice to have

• Experience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC models
• Familiarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift management
• Background in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBAC
• Knowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secrets
• Scripting and automation skills in Python, Bash, PowerShell, and REST API integration
• Understanding of networking tools, including DNS automation and IPAM (NetBox)
• Awareness of observability practices, such as monitoring, metrics, logging, and basic tooling
• Experience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRS
• Exposure to Azure VMware Solution (AVS) for hybrid/on-prem workload management
• Expertise in Image Factory pipelines for VM and container golden images
• Knowledge of Certificate Management tools like Venafi
• Experience implementing Policy as Code using OPA or similar policy engines
• Familiarity with Privileged Access Management (PAM), including break-the-glass integration
• Understanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integration
• Experience with Security Alerting through SIEM and WAF integrations
• Knowledge of firewall platforms like PaloAlto, F5, and Cloudflare
• Familiarity with ITSM/CMDB integration, including component request workflows and artifact repositories
• Experience with Vulnerability Management dashboards and reporting
• Skills in Documentation Automation, including generating Solution Design Documents (SDD)

Benefits

We connect like-minded people

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all

• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Comprehensive medical & family care package
• Four trust days per year for personal needs
• Discounts for fitness clubs
• Benefits package (hotels, restaurants, stores and services)

We connect like-minded people

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all

• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Comprehensive medical & family care package
• Five trust days per year (sick leave without a medical certificate)
• Benefits package (sports activities, a variety of stores and services)

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers
• Discounts in local language schools, including online courses for the Kazakh language

We cover it all:

• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Benefits package (sports activities, a variety of stores and services)
• Housing support program: preferential mortgage access via Otbasy Bank partnership

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all:

• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Discounts for fitness clubs and sports programs
• Benefits package (sports activities, a variety of stores and services)

With us you can:

• Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
• Receive the necessary equipment to perform your work tasks
• Change projects and technology stacks within EPAM
• Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
• Relocation opportunities may be available for eligible candidates, depending on the role and openings at other EPAM locations
• Participate in volunteer, charity programs and communities (both technical and interest-based)

We focus on your professional growth:

• You can plan your individual career path together with your manager
• Receive regular feedback from colleagues
• Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
• Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
• Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
• Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
• Study at EPAM Solution Architecture School with the instructors who are practicing architects
• Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
• Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)

What we offer

• Vacation and sick leave (including a sick leave without a medical certificate)
• A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
• Medical insurance for family members at corporate rates
• Company support during significant life events (childbirth or adoption, marriage, etc.)
• Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
• E-kids program - a free programming language training program for EPAMers' children

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Opportunity to work abroad for up to two months per year

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all:

• Comprehensive medical & family care package
• Seven trust days per year (sick leave without a medical certificate)
• Discounts from 800+ partners (sports activities, restaurants, stores and services)