Lead DevOps Engineer (Azure & .NET Ecosystem)

We are seeking an experienced Lead DevOps Engineer with deep expertise in the Azure and .NET ecosystem to drive the design, automation, and reliability of our cloud infrastructure and API platforms. In this role, you will lead complex technical investigations, build robust CI/CD pipelines, and leverage AI-assisted engineering tools to enhance operational efficiency across distributed systems.

Unlock the potential of remote work in Kazakhstan, giving you the flexibility to work from home or access our offices in Astana, Almaty or Karaganda.

Responsibilities

• Design, build, and support API integrations on Azure API Management (APIM)

• Develop and optimize policies (XML and C# expressions) for authentication, token handling, caching, transformation, routing, rate limiting, and error handling

• Implement Infrastructure as Code (IaC) using Terraform to provision, manage, and maintain environments

• Deploy, configure, and operate cloud-native services, including Azure Functions, Web Apps, Container Apps, and AKS, applying containerization and Kubernetes orchestration best practices

• Manage and troubleshoot Azure DevOps self-hosted build and deployment agents across on-premises servers, Azure Virtual Machine Scale Sets (VMSS), and Managed DevOps Pools (MDP), ensuring agent availability, connectivity, security, performance, and reliable pipeline execution

• Oversee application deployments across Windows and Linux environments, including on-premises infrastructure; configure, maintain, and troubleshoot backend and frontend application hosting using IIS, Nginx, and other relevant web/application servers

• Design, implement, and maintain CI/CD pipelines in Azure DevOps

• Ensure security and compliance by implementing OAuth 2.0, mutual TLS, SSL/TLS, RBAC, certificate management, and secure API design principles

• Lead complex technical investigations and root cause analysis across applications, APIs, infrastructure, CI/CD pipelines, and network layers, independently diagnosing issues spanning multiple systems using logs, traces, metrics, and systematic troubleshooting techniques

• Troubleshoot end-to-end request flows across clients, WAF, API Management, networking components, and backend services using KQL, Log Analytics, Application Insights, APIM tracing, and request correlation; develop monitoring dashboards and proactive alerts

• Investigate and resolve production incidents, including intermittent failures, performance degradation, connectivity issues, deployment failures, and authentication problems

• Actively leverage LLM-powered AI agents and AI-assisted engineering tools to accelerate development, automate repetitive tasks, support complex technical investigations, and improve operational efficiency while ensuring accuracy and security

• Align API design with SPA consumers such as Angular and React, considering CORS, authentication flows, and integration patterns

Requirements

• 5+ years of experience in DevOps or related roles, including at least 1 year of leadership experience

• Hands-on experience with Azure API Management, including developing complex policies and C# policy expressions

• Background in .NET development with proven experience building, integrating, and troubleshooting APIs and cloud applications

• Expertise in systematic troubleshooting, including log analysis, request tracing, network diagnostics, performance analysis, issue reproduction, and correlation of events across distributed systems

• Proficiency in leveraging LLM-powered AI agents and AI-assisted development tools for code development, troubleshooting, log analysis, infrastructure automation, scripting, and technical investigations, including prompt engineering

• Skills in CI/CD with Azure DevOps, including YAML pipelines, deployment automation, and infrastructure provisioning using Terraform

• Hands-on experience administering and troubleshooting Azure DevOps self-hosted agents, including on-premises agents, VMSS-based agents, and Managed DevOps Pools (MDP)

• Capability to deploy, configure, maintain, and troubleshoot applications on Windows and Linux servers, including IIS, Nginx, and backend application hosting

• Familiarity with Azure Functions, AKS/Container Apps, and Web Apps, API gateways, and WAF

• Understanding of Microsoft Entra ID, OAuth 2.0, and JWT, as well as mutual TLS, TLS certificates, Azure RBAC, and Azure Key Vault

• Competency in monitoring, diagnostics, and troubleshooting using Application Insights, Log Analytics, KQL, and distributed tracing

• Knowledge of networking fundamentals, including DNS, HTTP/HTTPS, and TCP/IP, along with TLS handshakes, proxies, load balancers, firewalls, and connectivity troubleshooting

• Qualifications in REST, SOAP, JSON, and XML, including SPA consumption patterns and CORS considerations

• Experience supporting production environments, handling incidents, performing root cause analysis (RCA), and implementing preventive improvements

• Excellent analytical, investigation, and problem-solving skills

• Excellent command of written and spoken English (B2+ level)

Nice to have

• Background in DevSecOps practices

• Familiarity with Azure AI Search

• Skills in PowerShell scripting

• Understanding of Azure Networking and Kubernetes orchestration

We offer/Benefits

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers
• Discounts in local language schools, including online courses for the Kazakh language

We cover it all:

• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Benefits package (sports activities, a variety of stores and services)
• Housing support program: preferential mortgage access via Otbasy Bank partnership

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.