Senior DevOps Engineer

We are seeking a Senior DevOps Engineer to operate as a one-person DevOps practice supporting a multi-tenant SaaS platform for insurance and financial services across LATAM, Canada and the US. The platform consists of around 18 .NET microservices with an Angular SSR front end, backed by Azure SQL, Azure Data Factory and webMethods for partner SOAP integrations, running across dev/demo/UAT/prod environments in a primary and a DR region, while supporting five teams of 30+ developers.

Responsibilities

• Manage Azure services including App Services, Application Gateway v2 with WAF, Azure Firewall egress rules, Key Vault, Blob Storage, Azure DNS, Application Insights and Log Analytics
• Maintain AKS-hosted self-hosted build agents to support CI/CD operations
• Deliver Infrastructure as Code using ARM templates and PowerShell through shared central pipeline templates used across approximately 20 repositories
• Build and maintain Azure DevOps YAML pipelines, manage GitHub repositories, rulesets and branch policies following the ADO-to-GitHub migration
• Troubleshoot pipeline failures and mitigate throttling issues
• Investigate production incidents using Application Insights, Kusto and Kudu diagnostics
• Diagnose third-party integration issues across DNS, TCP, TLS, HTTP and authentication layers with insurers and banks, including egress and whitelisting requests and vendor escalations
• Coordinate change management through ServiceNow CHG records, implementation plans and TCS task coordination
• Track VM vulnerability remediation with TCS based on Wiz findings and triage Invicti DAST results and WAF block investigations
• Complete client security questionnaires and manage SailPoint access recertification along with PIM/Entra privileged access
• Oversee FinOps activities including Azure cost allocation per tenant and line of business, capacity sizing for large client onboardings and infrastructure budget input
• Support developer enablement through access requests, app settings propagation across environments and configuration drift detection

Requirements

• 3+ years of experience in a DevOps role supporting production SaaS platforms
• Expertise in Azure services such as App Services, Application Gateway, WAF and Azure Firewall
• Proficiency in Azure Key Vault, Blob Storage, Azure DNS, Application Insights and Log Analytics
• Skills in AKS administration and managing self-hosted build agents
• Knowledge of Infrastructure as Code using ARM templates and PowerShell
• Background in Azure DevOps YAML pipelines and GitHub repository management, rulesets and branch policies
• Competency in incident investigation using Kusto and Kudu diagnostics
• Understanding of layered connectivity diagnostics (DNS, TCP, TLS, HTTP, auth) for third-party integrations
• Familiarity with ServiceNow change management processes
• Qualifications in security and compliance tools such as Wiz, Invicti DAST and SailPoint
• Capability to manage FinOps activities including cost allocation and capacity sizing
• Flexibility to use GitHub Copilot CLI agents and skills for DevOps automation workflows
• Proficiency in English at a B2+ level

Benefits

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn