We are seeking an experienced
Lead DevOps Engineer to spearhead the design, implementation, and delivery of an enterprise-wide automation platform.
In this role, you will lead the technical direction across Backstage developer portal capabilities, infrastructure automation, cloud (Azure & VMware) provisioning, security integration, and observability. The ideal candidate will combine hands-on technical expertise with leadership to drive Platform Engineering and self-service automation at enterprise scale.
Responsibilities
- Lead the design and implementation of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)
- Establish multi-tenancy models with org hierarchy and granular RBAC beyond basic authentication
- Integrate Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
- Define golden path templates and self-service workflows for development teams
- Architect and deliver Infrastructure as Code using Terraform/OpenTofu and Configuration as Code using Ansible
- Implement GitOps workflows for continuous deployment and drift management
- Automate provisioning and management of Azure services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)
- Lead Kubernetes (AKS) provisioning, cluster management, and operational dashboards
- Build and maintain image factory pipelines for VM and container golden images
Requirements
- 5+ years of experience in DevOps, Platform Engineering, or related infrastructure roles
- At least 1 year of relevant leadership experience
- Expertise in Infrastructure as Code using Terraform / OpenTofu and Configuration as Code with Ansible
- Proficiency in Azure networking services, including VNets, Application Gateway, and WAF
- Background in Azure security and compute components such as Azure Firewall, NSGs, and Subnets/Route Tables
- Skills in Azure application platforms, including App Services, Container Apps, and Function Apps
- Knowledge of Azure database services: Azure SQL, Cosmos DB, and Azure Postgres
- Competency in containerization and orchestration with Kubernetes / AKS provisioning, cluster management, and Docker
- Capability to build operational dashboards for Kubernetes environments
- Qualifications in CI/CD pipeline automation and integration using Azure DevOps (ADO)
- Excellent command of written and spoken English (B2+ level)
Nice to have
- Familiarity with Backstage (developer portals, plugins, Scaffolder/TechDocs/Software Catalog/Search), self-service platform design, and multi-tenancy with granular RBAC models
- Understanding of GitOps tooling such as ArgoCD / Flux for continuous deployment and drift management
- Showcase of Identity & Access management with Entra ID, Active Directory (GPOs), and M365 groups/RBAC
- Skills in secrets management using Azure Key Vault, OpenBao / HashiCorp Vault, and dynamic secrets
- Proficiency in scripting and automation with Python, Bash, and PowerShell, including REST API integration
- Knowledge of networking automation (DNS, IPAM with NetBox) and observability tooling for monitoring, metrics, and logging
- Background in VMware virtualization (vSphere, vSAN, NSX-T) along with SRM/DRS and Azure VMware Solution (AVS) for hybrid workload management
- Expertise in image factory pipelines, Certificate Management with Venafi, and Policy as Code using OPA
- Familiarity with Privileged Access Management (PAM) break-the-glass integration and DevSecOps tooling (SAST, DAST, SCA/IAST/ASPM)
- Competency in security alerting (SIEM & WAF), firewalls (PaloAlto, F5, Cloudflare), and ITSM/CMDB integration with artifact repositories
- Capability to deliver vulnerability dashboards/reporting and automated Solution Design Document (SDD) generation
We offer
- CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT
- Diversity of tasks and projects
- Assessment center for objective review of competency level
- Personal development plan
- Mentoring programs and leadership development
- Certification and professional development support
- Access to learning platforms including more than 2,500 internal courses
- English courses taught by certified teachers
- CORPORATE BENEFITS
- Extra leave days
- Referral bonuses
- COMPENSATION PACKAGE
- Competitive compensation paid in USD
- Regular salary and performance reviews
- MEDICAL & HEALTHCARE
- Private health insurance
- Well-being events
- WORKING ENVIRONMENT
- Recreation areas and kitchens
- Tea, coffee and snacks
- Sports equipment and game consoles
- IT Equipment
- Microsoft’s Software Assurance Home Use Program (HUP)
Please note that our Talent Attraction Team reviews applications and CVs submitted in English.
EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.
TR
