Senior DevOps Engineer - Azure

We are looking for a Senior DevOps Engineer to join our team and drive the implementation and operation of our Azure infrastructure platform, working across Terraform/OpenTofu, Kubernetes, and Configuration as Code to deliver reliable, scalable cloud environments. This is a fully remote position that offers you the flexibility to work from any location in Armenia, whether it's your home or well-equipped offices in Yerevan or Gyumri. Responsibilities Implement and maintain Terraform/OpenTofu modules for Azure App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, and Postgres, following designs defined by the Azure ArchitectBuild and operate the Azure Kubernetes Service (AKS) platform day-to-day, including cluster/node-pool provisioning, add-on configuration (ingress, cert-manager, external-dns, monitoring, policy), and namespace/tenant onboardingImplement identity wiring (managed identities, SPN/app registrations) and secrets integration (Azure Key Vault, OpenBao) for Azure workloadsBuild and maintain Image Factory pipelines for VM and container golden images (Linux and Windows/cloudbase-init baselines, CIS hardening, image scanning)Execute Configuration as Code (Ansible) playbooks for VM post-provisioning and golden-image handoffSupport Backstage golden-path template integration for Azure provisioning, testing generated infrastructure end-to-endTroubleshoot and remediate production issues across Azure automation modules during Implementation and AdoptionContribute to module testing, drift detection, and documentation per the platform's Infrastructure as Code Engine standards Requirements 3+ years of hands-on experience building and operating Azure infrastructure via Terraform/OpenTofu, including CI/CD-driven deployment with Azure DevOpsExperience operating Azure Kubernetes Service (AKS) clusters in production, including networking, policy, and namespace managementExperience with Azure identity constructs (managed identities, SPN/app registrations) and secrets integration (Key Vault, dynamic secrets)Experience with Configuration as Code (Ansible) for VM post-provisioning and golden-image pipelinesWorking knowledge of Azure networking constructs (VNets, private endpoints, NSGs) sufficient to integrate with the network foundation owned by the Network ArchitectCombined proficiency as a Terraform (IaC) and Ansible (CaC) developer, working AI-assisted using GitHub Copilot (provided project-wide) as standard practiceEnglish proficiency at B2 level or higher Nice to have Experience with Azure VMware Solution (AVS) private cloud provisioningFamiliarity with image hardening/scanning tooling and Shared Image Gallery publishing We offer We connect like-minded peopleDelivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growthLeadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersWe cover it allParticipation in the Employee Stock Purchase PlanMonetary bonuses for engaging in the referral programComprehensive medical & family care packageFour trust days per year for personal needsDiscounts for fitness clubsBenefits package (hotels, restaurants, stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.