Lead Azure Engineer

We are seeking a highly skilled Lead Azure Engineer to drive the design, integration, and security of enterprise cloud solutions. In this role, you will leverage your deep expertise in Microsoft Azure and identity platforms to deliver secure, scalable, and robust applications. You will collaborate closely with cross-functional teams to ensure seamless authentication, authorization, and integration across the enterprise ecosystem.

Responsibilities

• Lead the design and implementation of secure Azure cloud solutions across the enterprise
• Manage and configure Microsoft Entra ID components, including App Registrations, Enterprise Applications, and Service Principals
• Integrate enterprise applications and APIs with Microsoft Entra ID
• Configure and maintain API Permissions, Managed Identities, and Conditional Access policies
• Troubleshoot authentication, authorization, token, and integration issues
• Ensure secure API access and enforce identity-based security standards
• Collaborate with application, security, architecture, and infrastructure teams to deliver cohesive solutions
• Support and optimize Azure Cosmos DB implementations
• Provide technical leadership and mentorship on cloud and identity best practices

Requirements

• 5+ years of hands-on experience with Microsoft Azure cloud services and security
• At least 1 year of relevant leadership experience
• Expertise in Microsoft Entra ID, including App Registrations, Enterprise Applications, and Service Principals
• Proficiency in configuring API Permissions, Managed Identities, and Conditional Access
• Strong understanding of OAuth 2.0 authentication and authorization flows, including Authorization Code and Client Credentials
• Knowledge of OpenID Connect (OIDC), including ID tokens, access tokens, scopes, claims, and JWT
• Background in integrating enterprise applications and APIs with Microsoft Entra ID
• Capability to troubleshoot authentication, authorization, token, and integration issues
• Understanding of secure API access and identity-based security principles
• Experience collaborating with application, security, architecture, and infrastructure teams
• Familiarity with Azure Cosmos DB
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Skills in designing and implementing enterprise Identity and Access Management (IAM) solutions
• Expertise in IAM concepts, including authentication, authorization, and SSO
• Competency in MFA, RBAC, and identity lifecycle management

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.