Senior DevOps Engineer (MS Azure/Fabric)

About the role

EPAM is looking for a Senior DevOps Engineer to lead the setup and migration of Microsoft Azure and Microsoft Fabric environments. You will be responsible for building CI/CD pipelines, managing self‑hosted agents, and ensuring security throughout a cross‑tenant migration of a data warehouse and reporting stack.

Key responsibilities

• Design and implement Azure DevOps CI/CD pipelines for Power BI, Fabric Warehouse, Fabric Data Factory, Azure SQL Database, and Xtract Universal.
• Configure and maintain self‑hosted Azure DevOps agents with access to private endpoints and the Xtract Universal VM.
• Manage YAML pipelines, repositories, service connections, approvals, secrets, and environment promotions.
• Configure and troubleshoot VNets, private endpoints, private DNS, routing, Key Vault, SQL, and ADLS connectivity.
• Monitor subscription Secure Score and Defender for Cloud recommendations.
• Triage vulnerabilities, coordinate remediation, document exceptions, and provide remediation evidence.
• Integrate security testing into CI/CD, including secret scanning, dependency and code scanning, IaC checks, and deployment validation.
• Apply least‑privilege access principles and maintain comprehensive documentation.

Required profile

• Minimum 3 years of DevOps experience in Microsoft Azure environments.
• Hands‑on expertise with Microsoft Fabric Warehouse, Fabric Data Factory, and Power BI.
• Proficiency in Azure SQL Database, Key Vault, and ADLS.
• Strong knowledge of Azure DevOps, YAML pipelines, repositories, service connections, and self‑hosted agents.
• Experience with VNets, private endpoints, private DNS, and routing configuration.
• Familiarity with Microsoft Defender for Cloud, Secure Score monitoring, and remediation.
• Understanding of security testing practices such as secret scanning, dependency scanning, and IaC validation.
• English proficiency at B2 level or higher.

Required skills

• Microsoft Azure
• Microsoft Fabric Warehouse
• Fabric Data Factory
• Power BI
• Azure SQL Database
• Azure Key Vault
• Azure Data Lake Storage (ADLS)
• Azure DevOps (YAML pipelines, repositories, service connections, self‑hosted agents)
• Virtual Networks (VNets), private endpoints, private DNS, routing
• Microsoft Defender for Cloud & Secure Score
• Secret scanning, dependency scanning, code scanning, infrastructure‑as‑code checks
• Least‑privilege access management

What we offer

• Remote work from anywhere in Kyrgyzstan.
• Opportunities to work abroad for up to two months per year.
• Career development programs, certifications, and unlimited access to internal learning resources.
• Medical and family care package, mental‑health support, and fitness discounts.
• Monetary bonuses for referrals and six trust days per year.