Lead Cloud Engineer

We are looking for a Lead Cloud Engineer to join our innovative team.

We are delivering a Unified Automation Platform (Internal Developer Platform) to standardize secure, repeatable infrastructure delivery across Azure and on-premises VMware using templates and golden paths. You will lead Azure automation and AKS operations and strengthen IaC/CaC engineering practices. Apply to help teams ship faster with consistent, compliant deployments.

Responsibilities

• Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure Architect
• Build and operate the Azure Kubernetes Service (AKS) platform day-to-day: cluster/node-pool provisioning, add-on configuration (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboarding
• Implement identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao) for Azure workloads
• Build and maintain Image Factory pipelines for VM and container golden images (Linux and Windows/cloudbase-init baselines, CIS hardening, image scanning)
• Execute Configuration as Code (Ansible) playbooks for VM post-provisioning and golden-image handoff
• Support Backstage golden-path template integration for Azure provisioning, testing generated infrastructure end-to-end
• Troubleshoot and remediate production issues across Azure automation modules during Implementation and Adoption
• Contribute to module testing, drift detection, and documentation per the platform's Infrastructure as Code Engine standards

Requirements

• 5+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment (Azure DevOps)
• At least 1 year of relevant leadership experience
• Experience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace management
• Experience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)
• Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelines
• Working knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with the network foundation owned by the Network Architect
• Combined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot (provided project-wide) as standard practice
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Experience with Azure VMware Solution (AVS) private cloud provisioning
• Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing

We offer

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Opportunity to work abroad for up to two months per year

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all:

• Comprehensive medical & family care package
• Seven trust days per year (sick leave without a medical certificate)
• Discounts from 800+ partners (sports activities, restaurants, stores and services)

At EPAM Belarus, employees have the flexibility to choose the environment that suits them best. You can work from any location in Belarus, whether it's your home or our offices in Minsk, Grodno, Brest, Gomel, Mogilev or Vitebsk.

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our clients, our employees, and our communities. We embrace a dynamic and inclusive culture. Here, you will collaborate with multi-national teams, contribute to numerous innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to learn and grow continuously. No matter where you are located, you will join a dedicated, creative, diverse community to help you discover your fullest potential.

Remote in Belarus