Cloud Engineer

We are seeking a Cloud Engineer to become part of our team.In this role, you will contribute to constructing and operationalizing our Azure cloud platform, establishing the core organizational framework and infrastructure required to host our clients products on Azure. Your work will involve architecting and rolling out Azure landing zones, identity and access management, networking, and managed services — all delivered through Infrastructure as Code and aligned with FedRAMP/FISMA compliance standards.ResponsibilitiesArchitect and roll out the Azure organizational structure, covering management groups, subscriptions, and resource groups, in line with enterprise landing zone best practicesSet up Azure identity and access management with Entra ID, RBAC role assignments, Privileged Identity Management (PIM), conditional access policies, and break-glass accountsRoll out security and compliance solutions, including Microsoft Defender for Cloud, Azure Policy, and Microsoft Sentinel, to enable comprehensive logging and monitoringPerform FedRAMP/FISMA compliance gap assessments throughout the Azure environment and put in place the required controls to address any gaps discoveredPlan and construct Azure networking foundations, encompassing VNets, subnets, NSGs, NAT Gateways, route tables, and hub-spoke or mesh topologiesEstablish private connectivity approaches using Private Endpoints and Private DNS Zones for Azure managed servicesSet up and configure Azure managed resources, such as Blob Storage accounts, Azure Database for PostgreSQL, Azure Container Registry, Azure Machine Learning Compute, and Log Analytics workspacesDefine User-Assigned Managed Identities (UAMI) and apply least-privilege role assignments to enable secure workload authenticationDevelop and maintain all infrastructure as Terraform modules, applying GitOps workflows for change tracking and deploymentPartner with product engineering and Security teams to convert application needs into secure, compliant Azure infrastructure solutionsRequirementsBachelors or Masters degree in Computer Science or a similar technical field, along with demonstrated experience in Azure cloud platform engineering, administration, or architectureA minimum of 2 years of professional experience in a cloud engineering positionPractical experience overseeing cloud infrastructure through Infrastructure as Code with TerraformWorking experience designing and deploying Azure networking solutions, covering VNets, NSGs, Private Endpoints, and Private DNS ZonesSolid background in Azure identity and access management, including Entra ID, RBAC, and managed identitiesConfident scripting and automation skills using Python, Shell, or GoOutstanding verbal and written communication skills in English (B2+ level or above)Nice to haveBackground in working with FedRAMP, FISMA, or comparable federal compliance frameworks within a cloud settingAzure certifications such as AZ-104 (Azure Administrator), AZ-500 (Azure Security Engineer), or AZ-305 (Azure Solutions Architect)Practical experience with Azure managed data services, such as Azure Database for PostgreSQL, Blob Storage, and Azure Container RegistryHands-on knowledge of Kubernetes and Azure Kubernetes Service (AKS) for managing containerized workloadsApplied experience with Azure security tooling, including Microsoft Defender for Cloud, Azure Policy, and Microsoft SentinelFamiliarity with GitOps and CI/CD pipelines through GitHub Actions, Argo CD, or similar platformsStrong communication skills in both writing and speech, with the capacity to produce clear and thorough technical documentationWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

J-18808-Ljbffr