Summary
✨ AI‑Generated
Join a team building an internal developer platform that unifies automation, cloud provisioning and observability. You will shape infrastructure strategies using Backstage, Azure and VMware, enforce security and RBAC, and enable self‑service capabilities at enterprise scale, with the flexibility to work remotely anywhere in the country.
Highlights
Lead design of a unified automation platform, work with Backstage, Azure/Vmware, security and observability, drive platform engineering and self‑service automation, remote work across Georgia with offices in Tbilisi, Batumi and Kutaisi, leadership role at enterprise scale.
Description
We are seeking an experienced Senior DevOps Engineer to spearhead the design, implementation, and delivery of a Unified Automation Platform.
This role will lead the technical direction across Backstage developer portal capabilities, infrastructure automation, cloud (Azure & VMware) provisioning, security integration, and observability.
The ideal candidate will combine hands-on technical expertise with leadership to drive Platform Engineering and self-service automation at enterprise scale.
To discover more about Cloud practice at EPAM Georgia, visit this page.
Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi.
Responsibilities
Assist with design and implementation of an internal developer platform using Backstage (Software Catalogue, Scaffolder, TechDocs, Search)Establish multi-tenancy models with org hierarchy and granular RBAC beyond basic authenticationIntegrate Azure DevOps (ADO) for CI/CD pipelines, announcements, and notificationsDefine golden path templates and self-service workflows for development teamsDeliver Infrastructure as Code using Terraform/OpenTofu and Configuration as Code using AnsibleImplement GitOps workflows for continuous deployment and drift managementAutomate provisioning and management of Azure services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases (Azure SQL, Cosmos DB, Postgres)Lead Kubernetes (AKS) provisioning, cluster management, and operational dashboardsBuild and maintain image factory pipelines for VM and container golden images
Requirements
3+ years of experience as a DevOps Engineer, with expertise in Terraform / OpenTofu and AnsibleKnowledge of Azure networking and security services: VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route TablesExperience with Azure compute services: App Services, Container Apps, and Function AppsProficiency in Azure databases: Azure SQL, Cosmos DB, and Azure PostgresExpertise in Kubernetes / AKS provisioning, cluster management, ops dashboards, and DockerSkills in Azure DevOps (ADO) pipeline automation and integrationEnglish proficiency at B2 level or higher
Nice to have
Familiarity with Backstage (developer portals, plugins, Scaffolder, TechDocs, Software Catalog, Search), self-service platform design, multi-tenancy and granular RBAC modelsKnowledge of GitOps tools such as ArgoCD / Flux, continuous deployment, and drift managementBackground in Identity & Access management: Entra ID, Active Directory, Group Policy Objects (AD), M365 groups, RBACExperience with Secrets Management: Azure Key Vault, OpenBao / HashiCorp Vault, dynamic secretsSkills in scripting and automation: Python, Bash, PowerShell, REST API integrationFamiliarity with networking tools: DNS automation, IPAM (NetBox)Understanding of observability practices: monitoring, metrics, logging, basic observability toolingKnowledge of virtualization (VMware): vSphere, vSAN, NSX-T, SRM, DRSExperience with Azure VMware Solution (AVS): hybrid/on-prem workload managementExpertise in Image Factory: VM and container golden image pipelinesKnowledge of Certificate Management: VenafiExperience with Policy as Code: OPA / policy engine implementationFamiliarity with Privileged Access Management (PAM): break-the-glass integrationKnowledge of DevSecOps Tooling: SAST, DAST, SCA, IAST, ASPM integrationExperience with Security Alerting: SIEM & WAF alert integrationFamiliarity with Firewalls: PaloAlto, F5, CloudflareKnowledge of ITSM / CMDB Integration: component request workflows, artifact repositoriesExperience with Vulnerability Management: vulnerability dashboards and reportingSkills in Documentation Automation: Solution Design Document (SDD) generation
We offer
We connect like-minded peopleDelivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growthLeadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersWe cover it allParticipation in the Employee Stock Purchase PlanMonetary bonuses for engaging in the referral programComprehensive medical & family care packageFive trust days per year (sick leave without a medical certificate)Benefits package (sports activities, a variety of stores and services)
EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups.
With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.