Lead Cloud Engineer

We are seeking a Lead Cloud Engineer to join our innovative team.

Our mission is to deliver a Unified Automation Platform (Internal Developer Platform) that standardizes secure, repeatable infrastructure delivery across Azure and on-premises VMware through templates and golden paths. You will drive Azure automation and AKS operations while advancing IaC/CaC engineering practices. Apply to empower teams to ship faster with consistent, compliant deployments.

Responsibilities

• Develop and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, aligned with designs defined by the Azure Architect
• Operate and evolve the Azure Kubernetes Service (AKS) platform daily: cluster/node-pool provisioning, add-on configuration (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboarding
• Configure identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao) for Azure workloads
• Create and maintain Image Factory pipelines for VM and container golden images (Linux and Windows/cloudbase-init baselines, CIS hardening, image scanning)
• Run Configuration as Code (Ansible) playbooks for VM post-provisioning and golden-image handoff
• Enable Backstage golden-path template integration for Azure provisioning, validating generated infrastructure end-to-end
• Diagnose and resolve production issues across Azure automation modules during Implementation and Adoption
• Contribute to module testing, drift detection, and documentation aligned with the platform's Infrastructure as Code Engine standards

Requirements

• 5+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment (Azure DevOps)
• Minimum 1 year of relevant leadership experience
• Expertise in operating Azure Kubernetes Service (AKS) clusters in production, covering networking, policy, and namespace management
• Proficiency in Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)
• Skills in Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelines
• Working knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient for integrating with the network foundation owned by the Network Architect
• Combined competency in Terraform (IaC) and Ansible (CaC) development, working AI-assisted with GitHub Copilot (provided project-wide) as standard practice
• Strong command of written and spoken English (B2+ level)

Nice to have

• Experience with Azure VMware Solution (AVS) private cloud provisioning
• Familiarity with image hardening/scanning tooling and Shared Image Gallery publishing

We offer

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more

This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas.

Salary range €4.8K-€6.7K gross, based on your experience and interview results.

EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Lithuania to over 1,300+ talented innovators in just 5 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.

Hybrid in Republic of Lithuania