Lead Azure Cloud Engineer

We are looking for a seasoned Lead Azure Cloud Engineer to architect, develop, automate, and manage secure, scalable, and cost-effective cloud solutions on Microsoft Azure. Within this position, you will engage directly with Azure infrastructure, containers, DevOps pipelines, Infrastructure as Code, observability, security controls, and AI-driven cloud solutions. You will assist in converting architecture standards into functional platforms, repeatable deployment patterns, automation, and production-ready services. You will partner closely with Cloud Architects, Platform Engineering, DevOps, Security, Networking, Data, AI, and Product teams to provide reliable Azure solutions that enable modern application delivery, containerized workloads, and AI-driven enterprise capabilities. Responsibilities Architect, deploy, and manage Azure cloud infrastructure, covering subscriptions, resource groups, networking, identity, governance, security, and platform servicesDevelop and maintain repeatable Azure deployment patterns for applications, APIs, front-end workloads, microservices, containers, serverless services, data integrations, and AI-driven solutionsDeploy and manage Azure Kubernetes Service environments, encompassing node pools, ingress, workload identity, secrets management, autoscaling, networking, monitoring, container registry integration, and security controlsCreate, sustain, and enhance Infrastructure as Code with Terraform, including reusable modules, multi-environment deployments, automated validation, and CI/CD pipeline integrationArchitect and deploy CI/CD pipelines with GitHub Actions, Azure DevOps, GitLab CI/CD, or comparable toolsEnable DevOps practices including automated builds, testing, security scanning, artifact management, environment promotion, deployment approvals, rollback strategies, and release automationLeverage GitHub Copilot and AI-assisted engineering tools to boost productivity across scripting, IaC development, CI/CD pipeline creation, code review, troubleshooting, documentation, and automationDeploy cloud-native solutions using Azure services including App Service, Azure Functions, Logic Apps, Event Grid, Service Bus, Storage, Key Vault, API Management, Azure SQL, Cosmos DB, Azure Monitor, and Application InsightsAssist with deploying AI-driven solutions using Azure AI, Azure OpenAI, Azure AI Search, Azure Machine Learning, and related Azure AI servicesDevelop and integrate AI solution components based on patterns including RAG, agentic workflows, multi-agent orchestration, tool/function calling, prompt management, grounding, evaluation, and responsible AI controlsDeploy secure integration patterns using managed identities, RBAC, private endpoints, private DNS, network security groups, firewalls, and API gatewaysSet up and sustain observability with Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerts, distributed tracing, and operational runbooksResolve complex cloud, networking, deployment, performance, security, and production incidentsImplement DevSecOps practices including secrets management, dependency scanning, container image scanning, policy validation, secure configuration, and compliance automationTune Azure environments for performance, reliability, scalability, and cost efficiencyContribute to technical standards, reusable templates, documentation, operational procedures, and platform engineering practicesOffer technical guidance, mentoring, code reviews, and engineering leadership to fellow team membersCollaborate with architects and stakeholders to convert requirements into practical, secure, and maintainable Azure implementations Requirements Extensive hands-on experience architecting, deploying, and managing Azure cloud solutions in enterprise settingsSound knowledge of Azure networking, identity, governance, security, monitoring, and platform servicesHands-on experience with Azure Landing Zone concepts, hub-and-spoke networking, private endpoints, private DNS, firewalls, NSGs, route tables, and workload integration patternsExtensive hands-on experience with Azure Kubernetes Service, containers, container registries, ingress controllers, workload identity, autoscaling, monitoring, and container securitySubstantial experience with Terraform or other Infrastructure as Code tools, including module development, state management, validation, and multi-environment deliverySubstantial experience with CI/CD pipelines, ideally using GitHub Actions, Azure DevOps, GitLab CI/CD, or similar platformsSolid grasp of DevOps and DevSecOps practices, including automated testing, security scanning, artifact management, release automation, and deployment governanceExperience with GitHub, pull requests, code reviews, branching strategies, and collaborative engineering workflowsHands-on experience using GitHub Copilot or comparable AI-assisted development tools for infrastructure, automation, scripting, pipeline development, or documentationExperience with Azure PaaS and integration services including App Service, Azure Functions, Logic Apps, API Management, Event Grid, Service Bus, Storage, Key Vault, Azure SQL, Cosmos DB, and related servicesExperience deploying observability using Azure Monitor, Log Analytics, Application Insights, Container Insights, dashboards, alerting, and operational runbooksKnowledge of Azure AI and Generative AI services, particularly Azure OpenAI, Azure AI Search, and AI-driven automation patternsWorking knowledge of AI architecture patterns including RAG, agentic workflows, multi-agent systems, tool/function calling, grounding, prompt management, evaluation, and responsible AICapacity to resolve complex technical issues spanning cloud infrastructure, networking, containers, CI/CD, security, and application integrationStrong scripting and automation abilities using PowerShell, Bash, Python, or similar languagesCapacity to operate independently, own technical delivery, and support production-grade cloud environmentsExcellent communication abilities and capacity to collaborate with architects, engineers, security teams, product teams, and business stakeholders Nice to have Microsoft Azure certifications including Azure Administrator Associate, Azure Developer Associate, Azure DevOps Engineer Expert, or Azure Solutions Architect ExpertKubernetes certifications including CKA, CKAD, or CKSExperience with production-grade AKS platforms, service mesh, GitOps, Helm, Kustomize, Flux, Argo CD, or Kubernetes policy enginesExperience with Azure AI Foundry, Semantic Kernel, LangChain, LangGraph, AutoGen, or similar AI orchestration frameworksExperience developing or supporting RAG platforms, AI agents, multi-agent workflows, or enterprise knowledge search solutionsExperience with platform engineering, internal developer platforms, self-service cloud capabilities, paved roads, and reusable engineering templatesExperience in regulated industries with rigorous compliance, security, auditability, and governance requirementsFamiliarity with SRE practices, incident response, reliability engineering, performance testing, and cost optimization We offer We gather like-minded people:Engineering community of industry professionalsFriendly team and enjoyable working environmentFlexible schedule and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Outstanding career roadmapLeadership development, career advising, soft skills, and well-being programsCertification (GCP, Azure, AWS)Unlimited access to LinkedIn Learning, Get Abstract, Cloud GuruEnglish classesWe cover it all:Stable income (Employment Contract or B2B)Participation in the Employee Stock Purchase PlanBenefits package (health insurance, multisport, shopping vouchers)Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and moreReferral bonusesCorporate, social and well-being eventsPlease, note:The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.We will reach out to selected candidates exclusively. EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.