Lead Azure Cloud Engineer

We're looking for a seasoned Lead Azure Cloud Engineer to architect, construct, automate, and manage secure, scalable, and cost-effective cloud solutions on Microsoft Azure. This role involves direct engagement with Azure infrastructure, containerization, DevOps pipelines, Infrastructure as Code, observability, security controls, and AI-driven cloud solutions. You'll help convert architecture standards into functioning platforms, repeatable deployment patterns, automation processes, and production-ready services. You'll partner closely with Cloud Architects, Platform Engineering, DevOps, Security, Networking, Data, AI, and Product teams to deliver strong Azure solutions supporting modern application delivery, containerized workloads, and enterprise AI capabilities. This is a fully remote position that offers you the flexibility to work from any location in Armenia, whether it's your home or well-equipped offices in Yerevan or Gyumri. Responsibilities Design, implement, and maintain Azure cloud infrastructure, including subscriptions, resource groups, networking, identity, governance, security, and platform servicesConstruct and support reusable Azure deployment patterns for applications, APIs, front-end workloads, microservices, containers, serverless services, data integrations, and AI-enabled solutionsOperate and implement Azure Kubernetes Service environments, covering node pools, ingress, workload identity, secrets management, autoscaling, networking, monitoring, container registry integration, and security controlsDevelop, maintain, and enhance Infrastructure as Code using Terraform, including reusable modules, multi-environment deployments, automated validation, and CI/CD pipeline integrationCreate and implement CI/CD pipelines using GitHub Actions, Azure DevOps, GitLab CI/CD, or comparable toolsSupport DevOps practices including automated builds, testing, security scanning, artifact management, environment promotion, deployment approvals, rollback strategies, and release automationLeverage GitHub Copilot and AI-assisted engineering tools to boost productivity in scripting, IaC development, CI/CD pipeline creation, code review, troubleshooting, documentation, and automationDeploy cloud-native solutions using Azure services such as App Service, Azure Functions, Logic Apps, Event Grid, Service Bus, Storage, Key Vault, API Management, Azure SQL, Cosmos DB, Azure Monitor, and Application InsightsSupport implementation of AI-enabled solutions using Azure AI, Azure OpenAI, Azure AI Search, Azure Machine Learning, and related Azure AI servicesConstruct and integrate AI solution components based on patterns such as RAG, agentic workflows, multi-agent orchestration, tool/function calling, prompt management, grounding, evaluation, and responsible AI controlsImplement secure integration patterns leveraging managed identities, RBAC, private endpoints, private DNS, network security groups, firewalls, and API gatewaysSet up and maintain observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerts, distributed tracing, and operational runbooksResolve complex cloud, networking, deployment, performance, security, and production incidentsApply DevSecOps practices including secrets management, dependency scanning, container image scanning, policy validation, secure configuration, and compliance automationEnhance Azure environments for performance, reliability, scalability, and cost efficiencyContribute to technical standards, reusable templates, documentation, operational procedures, and platform engineering practicesOffer technical guidance, mentoring, code reviews, and engineering leadership to team membersCollaborate with architects and stakeholders to convert requirements into practical, secure, and maintainable Azure implementations Requirements Extensive hands-on experience architecting, implementing, and managing Azure cloud solutions within enterprise environmentsStrong grasp of Azure networking, identity, governance, security, monitoring, and platform servicesApplied experience with Azure Landing Zone concepts, hub-and-spoke networking, private endpoints, private DNS, firewalls, NSGs, route tables, and workload integration patternsExtensive hands-on experience with Azure Kubernetes Service, containers, container registries, ingress controllers, workload identity, autoscaling, monitoring, and container securityExtensive experience with Terraform or similar Infrastructure as Code tools, including module development, state management, validation, and multi-environment deliveryExtensive experience with CI/CD pipelines, ideally using GitHub Actions, Azure DevOps, GitLab CI/CD, or similar platformsSolid grasp of DevOps and DevSecOps practices including automated testing, security scanning, artifact management, release automation, and deployment governanceBackground working with GitHub, pull requests, code reviews, branching strategies, and collaborative engineering workflowsApplied experience using GitHub Copilot or comparable AI-assisted development tools for infrastructure, automation, scripting, pipeline development, or documentationBackground with Azure PaaS and integration services such as App Service, Azure Functions, Logic Apps, API Management, Event Grid, Service Bus, Storage, Key Vault, Azure SQL, Cosmos DB, and related servicesBackground implementing observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerting, and operational runbooksGrasp of Azure AI and Generative AI services, particularly Azure OpenAI, Azure AI Search, and AI-enabled automation patternsApplied knowledge of AI architecture patterns such as RAG, agentic workflows, multi-agent systems, tool/function calling, grounding, prompt management, evaluation, and responsible AICapability to resolve complex technical issues spanning cloud infrastructure, networking, containers, CI/CD, security, and application integrationSolid scripting and automation abilities using PowerShell, Bash, Python, or comparable languagesCapacity to work independently, own technical delivery, and support production-grade cloud environmentsStrong communication skills and capability to collaborate with architects, engineers, security teams, product teams, and business stakeholders Nice to have Microsoft Azure certifications such as Azure Administrator Associate, Azure Developer Associate, Azure DevOps Engineer Expert, or Azure Solutions Architect ExpertKubernetes certifications such as CKA, CKAD, or CKSBackground with production-grade AKS platforms, service mesh, GitOps, Helm, Kustomize, Flux, Argo CD, or Kubernetes policy enginesBackground with Azure AI Foundry, Semantic Kernel, LangChain, LangGraph, AutoGen, or comparable AI orchestration frameworksBackground constructing or supporting RAG platforms, AI agents, multi-agent workflows, or enterprise knowledge search solutionsBackground with platform engineering, internal developer platforms, self-service cloud capabilities, paved roads, and reusable engineering templatesBackground working in regulated industries with strong compliance, security, auditability, and governance requirementsFamiliarity with SRE practices, incident response, reliability engineering, performance testing, and cost optimization We offer We connect like-minded peopleDelivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growthLeadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersWe cover it allParticipation in the Employee Stock Purchase PlanMonetary bonuses for engaging in the referral programComprehensive medical & family care packageFour trust days per year for personal needsDiscounts for fitness clubsBenefits package (hotels, restaurants, stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.