> Markdown version of [/jobs/ext/3408614-principal-cloud-kubernetes-engineer-aws-azure](https://www.wearedevelopers.com/jobs/ext/3408614-principal-cloud-kubernetes-engineer-aws-azure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Cloud Kubernetes Engineer (AWS & Azure) - **Company:** EPAM Systems, Inc. - **Location:** Málaga, Spain - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Amazon S3, Microsoft Azure, Bash Shell, Cloud Engineering, Computer Networks, Distributed Systems, Domain Name System (DNS), Identity and Access Management, Python (Programming Language), Key Management, Peering, Performance Tuning, Role-Based Access Control, Cloud Services, Prometheus, Datadog, Policy as Code, Scripting, Software Modules, Load Balancing, Istio, Grafana, Multi-Cloud, Amazon Virtual Private Cloud (VPC), Containerization, Kubernetes, Route53, Cloudwatch, Terraform, Docker - **Published:** September 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e2e38ff4ee8858fe ## About the Role * 7+ years of professional engineering experience with modern cloud-native architectures * Strong expertise in cloud platforms (AWS and Azure), including EKS, AKS, VPC/VNet, IAM, EBS/EFS, S3, Load Balancers and Route53 * Deep understanding of Kubernetes architecture, networking, storage and security principles with production-scale management experience * Proven experience with Infrastructure-as-Code workflows: Terraform (module development, state handling) and Helm/Helmfile * Practical knowledge of GitOps tools (ArgoCD or Flux) and declarative infrastructure deployment * Experience implementing security policies, secrets management and compliance automation * Advanced skill in observability tooling (Prometheus, Grafana) and log management via CloudWatch or ELK/EFK * Scripting proficiency in Bash, Python or Go for automation and system tooling * Strong knowledge of containerization and image lifecycle using Docker, ECR or ACR * Clear communication skills and ability to document complex systems effectively Nice to have * Familiarity with policy-as-code frameworks (Kyverno, OPA/Gatekeeper) * Experience with AWS PrivateLink, VPC peering and hybrid/multi-cloud networking * Understanding of service mesh patterns, ingress controllers and DNS management * Exposure to performance tuning and capacity planning for Kubernetes environments ## Description This position offers the chance to work with cutting-edge Kubernetes ecosystems, enhance automation for mission-critical workloads and collaborate closely with engineering teams to optimize application delivery within a modern cloud-native environment., * Design, implement and maintain production Kubernetes clusters on EKS (AWS) and AKS (Azure) across multiple environments and regions * Configure and operate GitOps workflows with ArgoCD, enabling declarative application delivery and cluster configuration * Develop and manage Infrastructure-as-Code using Terraform for cloud resources and Helm/Helmfile for Kubernetes deployments * Ensure observability and reliability with Prometheus, Grafana, CloudWatch and implement monitoring/alerting strategies * Apply security best practices, including network policies, RBAC, pod security controls and secret management solutions * Operate and optimize Kubernetes add-ons such as Argo Workflows, Argo Rollouts, cert-manager, CSI drivers and cluster autoscalers * Diagnose and resolve distributed systems issues in compute, networking and storage layers * Collaborate with development teams to improve deployment models, scalability and resource utilization * Ensure clear documentation of architectures, operational workflows and incident handling standards ## Related Videos - [Kubernetes dev is fun, but setup and ops isn't! See a fun PaaS alternative to push any code, ipynbs or even just data!](https://www.wearedevelopers.com/videos/732-kubernetes-dev-is-fun-but-setup-and-ops-isn-t-see-a-fun-paas-alternative-to-push-any-code-ipynbs-or-even-just-data) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [How I saved 200K/yr in direct costs writing 0 code lines in K8s](https://www.wearedevelopers.com/videos/1055-how-i-saved-200k-yr-in-direct-costs-writing-0-code-lines-in-k8s) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)