Cloud Architect

EPAM Systems

Remote · ArmeniaSalary not disclosedcontractVerified recentlyEPAM Systems Careers

We are seeking an experienced Cloud Architect to join our team and contribute to the delivery of a Unified Automation Platform. This Internal Developer Platform (IDP) will standardize new-project delivery, centralize access to development resources, and enable software creation through templates and golden paths.

Responsibilities

Architect Infrastructure as Code modules (Terraform/OpenTofu) for Azure App Services, Container Apps, and Function Apps, as well as Azure SQL, Azure Cosmos DB, and Azure Postgres, including the Azure VMware Solution (AVS) private cloud module with managed-identity wiring, private endpoints, and diagnostic settings to…
Define the Azure identity architecture in partnership with the security team, covering Entra ID, Active Directory, and Group Policy Objects, along with M365 groups, SPN/app registrations, and managed identities, ensuring secrets land in OpenBao/Key Vault per platform standards
Design the Azure Kubernetes Service (AKS) platform, including cluster and node-pool design, baseline add-on stack (ingress, cert-manager, external-dns, monitoring, policy), namespace/tenant onboarding, and an operations dashboard for cluster management
Collaborate with the Network Architect on core connectivity (VNets, Application Gateway, WAF), Azure Firewall, NSGs, and DNS, NetBox IPAM, and ExpressRoute connectivity, ensuring Azure compute, database, and AKS modules integrate cleanly with the network foundation
Define the Image Factory architecture for VM and container golden images, covering Linux and Windows/cloudbase-init baselines, CIS hardening, agent injection, and image scanning with Shared Image Gallery publishing/versioning
Establish foundational Infrastructure as Code Engine standards (remote state/backend, locking, RBAC), including module registry, testing framework, drift detection, policy hooks, and secrets injection consumed by all other automation modules
Partner with the Backstage Architect to expose Azure provisioning capabilities as Backstage golden-path templates, and with Integration Architects on observability, ITSM/CMDB, and security integrations touching Azure resources
Provide architectural governance during Implementation, validate production deployments, and support module lifecycle ownership during Adoption

Languages

Work format: Remote
Seniority: Senior
Posted: 3 Sept 2026 (yesterday)
Last verified: 4 Sept 2026

Keep looking

More Software jobs in Armenia All IT vacancies Internships and entry level

Loading…

Responsibilities

Architect Infrastructure as Code modules (Terraform/OpenTofu) for Azure App Services, Container Apps, and Function Apps, as well as Azure SQL, Azure Cosmos DB, and Azure Postgres, including the Azure VMware Solution (AVS) private cloud module with managed-identity wiring, private endpoints, and diagnostic settings to…

Define the Azure identity architecture in partnership with the security team, covering Entra ID, Active Directory, and Group Policy Objects, along with M365 groups, SPN/app registrations, and managed identities, ensuring secrets land in OpenBao/Key Vault per platform standards

Design the Azure Kubernetes Service (AKS) platform, including cluster and node-pool design, baseline add-on stack (ingress, cert-manager, external-dns, monitoring, policy), namespace/tenant onboarding, and an operations dashboard for cluster management

Collaborate with the Network Architect on core connectivity (VNets, Application Gateway, WAF), Azure Firewall, NSGs, and DNS, NetBox IPAM, and ExpressRoute connectivity, ensuring Azure compute, database, and AKS modules integrate cleanly with the network foundation

Define the Image Factory architecture for VM and container golden images, covering Linux and Windows/cloudbase-init baselines, CIS hardening, agent injection, and image scanning with Shared Image Gallery publishing/versioning

Establish foundational Infrastructure as Code Engine standards (remote state/backend, locking, RBAC), including module registry, testing framework, drift detection, policy hooks, and secrets injection consumed by all other automation modules

Partner with the Backstage Architect to expose Azure provisioning capabilities as Backstage golden-path templates, and with Integration Architects on observability, ITSM/CMDB, and security integrations touching Azure resources

Provide architectural governance during Implementation, validate production deployments, and support module lifecycle ownership during Adoption