EPAM Systems

We're looking for a Principal Cloud Kubernetes Engineer (AWS & Azure) to design, deploy, and operate multi-cloud Kubernetes infrastructure using GitOps and infrastructure as code to enable scalable, reliable, and secure platform operations.

🎯 Responsibilities

1. Design, implement, and maintain production Kubernetes clusters on EKS and AKS across multiple environments and regions
2. Configure and operate GitOps workflows with ArgoCD for declarative application delivery and cluster configuration
3. Develop and manage infrastructure as code using Terraform for cloud resources and Helm/Helmfile for Kubernetes deployments
4. Build observability and reliability practices using Prometheus, Grafana, and CloudWatch
5. Implement monitoring and alerting strategies
6. Apply security best practices, including network policies, RBAC, pod security controls, and secrets management
7. Operate and optimize Kubernetes add-ons such as Argo Workflows, Argo Rollouts, cert-manager, CSI drivers, and cluster autoscalers
8. Diagnose and resolve distributed systems issues across compute, networking, and storage layers
9. Collaborate with development teams to improve deployment models, scalability, and resource utilization
10. Document architectures, operational workflows, and incident-handling standards

🛠️ Requirements

1. At least 7 years of professional engineering experience with modern cloud-native architectures
2. Strong expertise in AWS and Azure, including EKS, AKS, VPC/VNet, IAM, EBS/EFS, S3, load balancers, and Route 53
3. Deep understanding of Kubernetes architecture, networking, storage, and security principles, with experience managing production-scale environments
4. Proven experience with infrastructure-as-code workflows using Terraform, including module development and state handling
5. Strong experience with Helm and Helmfile
6. Practical knowledge of GitOps tools such as ArgoCD or Flux and declarative infrastructure deployment
7. Experience implementing security policies, secrets management, and compliance automation
8. Advanced knowledge of observability tools, including Prometheus and Grafana, and log management with CloudWatch or ELK/EFK
9. Scripting proficiency in Bash, Python, or Go for automation and systems tooling
10. Strong knowledge of containerization and image lifecycle management using Docker, ECR, or ACR
11. Clear communication skills and the ability to document complex systems effectively

➕ Nice to have

1. Familiarity with policy-as-code frameworks such as Kyverno or OPA/Gatekeeper
2. Experience with AWS PrivateLink, VPC peering, and hybrid or multi-cloud networking
3. Understanding of service mesh patterns, ingress controllers, and DNS management
4. Experience with performance tuning and capacity planning for Kubernetes environments

🤗 Benefits

1. Private health insurance
2. Employee stock purchase plan
3. 100% paid sick leave
4. Referral program
5. Professional certification support
6. Language courses
7. 24 working days of annual leave
8. Paid time off for public holidays
9. Career development planning, internal training, mentorship, sponsored certifications, and LinkedIn courses
10. Opportunities to grow as a People Manager, technical specialist, Solution Architect, or Project or Delivery Manager

We're looking for a Principal Security Platform Engineer to design, build, and operate security controls across cloud, network, identity, endpoint, data, and software supply chain environments. You will combine deep technical security expertise with a DevOps-driven approach, using automation, Infrastructure as Code (IaC), Policy as Code (PaC), CI/CD security, and AI-assisted engineering tools to improve protection, efficiency, and resilience at scale.

🎯 Responsibilities

1. Architect, implement, and operate highly available security platforms and controls with measurable outcomes
2. Enhance and integrate security solutions across AWS, Azure, and GCP environments
3. Continuously improve security controls through automation, IaC, PaC, and self-service capabilities
4. Implement and manage CSPM/CNAPP solutions, such as Wiz, to monitor and reduce cloud risk
5. Support secure software delivery pipelines, including dependency scanning, artifact validation, and secrets management
6. Develop Infrastructure as Code using Terraform, Pulumi, or Ansible for automated provisioning
7. Apply Policy as Code frameworks, such as OPA and Sentinel, for enforcement and compliance automation
8. Build and manage observability components for threat detection, alerting, and incident response
9. Collaborate with Security Operations, DevOps, and engineering teams to maintain a robust security posture
10. Use AI-assisted tools to accelerate automation, security analysis, and operational documentation

🛠️ Requirements

1. Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field, or equivalent experience
2. 5+ years of experience in security engineering, platform engineering, or related cloud-focused roles
3. Hands-on experience with cloud security across AWS, Azure, and GCP, as well as CSPM/CNAPP platforms
4. Strong understanding of networking, secure systems design, and infrastructure security principles
5. Proficiency in scripting or programming with Python and/or PowerShell
6. Familiarity with Windows and Linux environments for operational security management
7. Knowledge of CI/CD security, IaC, and PaC practices using Terraform or similar tools
8. Strong operational mindset, including experience with monitoring, alerting, and incident response
9. Comfort working with AI-driven development and security analysis tools
10. Excellent communication skills, with the ability to document and present technical solutions effectively

➕ Nice to have

1. Deep expertise in Terraform, Pulumi, Ansible, or OPA (Open Policy Agent) frameworks
2. Experience implementing software supply chain security measures, including SBOMs, artifact signing, and dependency risk checks
3. Familiarity with containerization and Kubernetes security controls
4. Knowledge of cloud-native security services and platform tools, such as Wiz and Checkov
5. Exposure to network security technologies, including IDS, IPS, DLP, EDR, firewalls, and file integrity monitoring
6. Strong Python development background focused on automation and orchestration
7. Experience creating self-service security solutions for engineering enablement
8. Demonstrated use of AI-assisted engineering tools to streamline workflows and security testing

🤗 Benefits

1. Private health insurance
2. Employee stock purchase plan
3. 100% paid sick leave
4. Referral program
5. Professional certification opportunities
6. Language courses