Infrastructure Automation & Orchestration Architect

We are seeking an Infrastructure Architect focused on automation-first architecture, design, and delivery for secure, scalable hybrid environments across Windows, Citrix, and cloud platforms. You will partner with cross-functional stakeholders, implement Infrastructure as Code and monitoring, and ensure smooth operational handoffs. Responsibilities Design hybrid infrastructure architectures that prioritize automation, zero-configuration, and zero-trust principles Build and implement scalable, secure Windows, Citrix, and cloud environments using engineering best practices Engineer and administer large-scale hybrid infrastructure services, including identity and access management Develop automation and orchestration using PowerShell and Infrastructure as Code patterns Integrate security and privacy requirements into practical, testable engineering controls Coordinate with cybersecurity partners to support threat management and data loss prevention initiatives Implement monitoring, alerting, and reporting for uptime, performance, capacity, and utilization Drive IaC adoption through examples, standards, and mentorship to improve repeatability Collaborate with business users, external parties, and cross-functional technology groups to deliver solutions Prepare operational handoff documentation and transition run activities to infrastructure operations teams Requirements 7+ years infrastructure engineering experience with Windows-based enterprise environments 7+ years cloud engineering experience with AWS or Microsoft Azure in hybrid environments Hands-on IAM experience with AWS IAM and enterprise identity platforms Proven leadership skills mentoring peers and advocating Infrastructure as Code adoption Strong project delivery skills coordinating work with security, network, app dev, and service desk teams Advanced PowerShell scripting skills for automation and administration Strong Citrix Cloud skills supporting Citrix services and virtual app/desktop workloads Solid Active Directory Domain Services skills including access, policy, and integration needs Practical security and compliance knowledge aligned to implementable engineering controls Strong analytical skills with high attention to detail and problem solving Clear communication skills for presenting technical decisions to varied audiences English proficiency B2 (Upper-Intermediate) Bachelor’s degree or equivalent work experience in a related field Nice to have AWS Certified Solutions Architect or Microsoft Azure Solutions Architect Expert certification Microsoft Azure identity experience, including Azure Identity patterns and integrations Cybersecurity & Trust experience supporting threat management or DLP programs Monitoring and Observability experience with enterprise alerting and reporting practices Broader Amazon Web Services experience beyond core identity capabilities We offer International projects with top brands Work with global teams of highly skilled, diverse peers Healthcare benefits Employee financial programs Paid time off and sick leave Upskilling, reskilling and certification courses Unlimited access to the LinkedIn Learning library and 22,000+ courses Global career opportunities Volunteer and community involvement opportunities EPAM Employee Groups Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.