Cloud Engineer

We are looking for a Cloud Engineer to participate in a strategic initiative centered on standardizing, governing, and automating an Enterprise Cloud infrastructure. In this position, you will play a crucial role in a technical homologation strategy that transitions from a legacy AWS environment to a highly governed and secure Microsoft Azure ecosystem, leveraging advanced Infrastructure as Code (IaC) and CI/CD automation.

Responsibilities

• Build OpenTofu/Terraform modules for Azure services by translating existing AWS definitions
• Extend, refactor, and repair existing IaC modules to align with technical and security standards
• Perform formatting, syntax, security, and quality checks using OpenTofu, Checkov, and other designated static analysis tools
• Test, deploy, and debug modules in the Azure Sandbox environment
• Produce detailed technical documentation for each module, covering variables, outputs, usage examples, prerequisites, and limitations
• Assist the architectural team with equivalence analysis between AWS and Azure services
• Enforce robust security measures including diagnostics, tagging strategies, RBAC, Managed Identities, and necessary networking setups
• Engage actively in Pull Requests (PRs) and code reviews, and address technical feedback
• Create and modify existing YAML-based Azure Pipelines while generating deployment evidence
• Proactively communicate blockers, technical risks, dependencies, and scope deviations to the Cloud Architect

Requirements

• Minimum 2 years of experience working with cloud computing, automation, and CI/CD
• Skilled in Microsoft Azure and AWS, possessing intermediate to advanced hands-on experience in operating and deploying services
• Solid infrastructure programming abilities in OpenTofu and/or Terraform, demonstrating the capacity to create reusable modules from the ground up and sustain existing codebases
• Direct experience building and maintaining Azure Pipelines (YAML), Git repositories, and Continuous Integration workflows
• Working knowledge of the principle of least privilege, Guardrails setup, and embedding security testing (SAST/DAST) within CI/CD pipelines
• Proficient in scripting languages like Python and Bash, with hands-on experience leveraging AI coding assistants to enhance delivery efficiency

Benefits

• Comprehensive wellness: WellHub Plan (Gympass) with access to thousands of centers, annual ophthalmological operation and exclusive discounts on health and beauty
• 100% Payroll Scheme
• Legal Benefits
• Benefits Package
• Professional Development Plan
• Multicultural Collaboration
• Referal Program
• Commercial Agreements and Discounts: Through exclusive agreements with partner companies, EPAMers and their families have access to special prices on products and services, offered as discounts for being part of EPAM
• Development opportunities