Lead DevOps Engineer

We're looking for a skilled Lead DevOps Engineer to guide the development and delivery of a Unified Automation Platform. This person will drive technical strategy for the Backstage developer portal, infrastructure automation, cloud provisioning (Azure & VMware), security integration, and observability. The ideal candidate blends great technical skills with leadership abilities to advance Platform Engineering and enterprise-scale self-service automation.

Responsibilities

• Support the design and build-out of an internal developer platform using Backstage (Software Catalog, Scaffolder, TechDocs, Search)
• Build multi-tenancy structures with org hierarchy and detailed RBAC that go beyond basic authentication
• Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications
• Create golden path templates and self-service workflows for development teams
• Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible
• Set up GitOps workflows to manage continuous deployment and drift
• Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)
• Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards
• Develop and maintain image factory pipelines for VM and container golden images

Requirements

• Over 5 years of DevOps engineering experience, with strong skills in Terraform/OpenTofu and Ansible
• At least 1 year of leadership experience
• Solid understanding of Azure networking and security services, such as VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables
• Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps
• Strong knowledge of Azure databases, such as Azure SQL, Cosmos DB, and Azure Postgres
• Deep expertise in Kubernetes/AKS provisioning, cluster management, ops dashboards, and Docker
• Proven skills in Azure DevOps (ADO) pipeline automation and integration
• English proficiency at B2 level or above

Nice to have

• Experience with Backstage, including developer portals, plugins, Scaffolder, TechDocs, Software Catalog, and Search, plus self-service platform design and multi-tenancy/RBAC models
• Familiarity with GitOps tools like ArgoCD or Flux, along with continuous deployment and drift management
• Background in Identity & Access Management, covering Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, and RBAC
• Knowledge of Secrets Management tools such as Azure Key Vault, OpenBao/HashiCorp Vault, and dynamic secrets
• Scripting and automation skills in Python, Bash, PowerShell, and REST API integration
• Understanding of networking tools, including DNS automation and IPAM (NetBox)
• Awareness of observability practices, such as monitoring, metrics, logging, and basic tooling
• Experience with VMware virtualization, including vSphere, vSAN, NSX-T, SRM, and DRS
• Exposure to Azure VMware Solution (AVS) for hybrid/on-prem workload management
• Expertise in Image Factory pipelines for VM and container golden images
• Knowledge of Certificate Management tools like Venafi
• Experience implementing Policy as Code using OPA or similar policy engines
• Familiarity with Privileged Access Management (PAM), including break-the-glass integration
• Understanding of DevSecOps tooling, such as SAST, DAST, SCA, IAST, and ASPM integration
• Experience with Security Alerting through SIEM and WAF integrations
• Knowledge of firewall platforms like PaloAlto, F5, and Cloudflare
• Familiarity with ITSM/CMDB integration, including component request workflows and artifact repositories
• Experience with Vulnerability Management dashboards and reporting
• Skills in Documentation Automation, including generating Solution Design Documents (SDD)

We offer

CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT

• Diversity of tasks and projects
• Assessment center for objective review of competency level
• Personal development plan
• Mentoring programs and leadership development
• Certification and professional development support 
• Access to learning platforms including more than 2,500 internal courses
• English courses taught by certified teachers

CORPORATE BENEFITS

• Extra leave days
• Referral bonuses

COMPENSATION PACKAGE

• Competitive compensation paid in USD
• Regular salary and performance reviews

MEDICAL & HEALTHCARE

• Private health insurance
• Well-being events

WORKING ENVIRONMENT

• Recreation areas and kitchens
• Tea, coffee and snacks
• Sports equipment and game consoles
• IT Equipment
• Microsoft’s Software Assurance Home Use Program (HUP)

Please note that our Talent Attraction Team reviews applications and CVs submitted in English.

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

Remote in Türkiye