Senior Azure Cloud Platform Engineer / SRE, Brazil

At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.

With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.

We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.

The Senior DevOps / SRE engineer designs, builds and operates secure, resilient Azure platforms and production services. The role combines cloud platform engineering, site reliability engineering, infrastructure as code, CI/CD and software automation. The engineer works primarily with Terraform and
Bicep, develops automation and platform capabilities using .NET/C#, Python and PowerShell, and uses AI-assisted engineering tools such as Claude to accelerate delivery and troubleshooting while critically validating generated output.

Responsibilities

• Design, provision and maintain Azure landing zones, management groups, subscriptions, resource groups and shared platform services using Terraform and Bicep.
• Engineer Azure networking including hub-and-spoke VNets, NSGs, route tables, Azure Firewall, Front Door, Application Gateway/WAF, Private Link, Private DNS, VPN Gateway and ExpressRoute.
• Build reusable Terraform and Bicep modules, manage remote state, perform plan/what-if validation, detect configuration drift and promote infrastructure changes through pull-request review and approvals.
• Build and maintain CI/CD and release automation using Azure DevOps Pipelines and/or GitHub Actions; integrate Octopus Deploy where required.
• Develop production-quality cloud and DevOps tooling using .NET/C#, Python and PowerShell, including APIs, Azure Functions, CLI utilities, integrations, compliance checks, reporting and operational automation.
• Build and operate containerized workloads on Azure Kubernetes Service (AKS) and Azure Container Apps, including container registries, scaling, health probes, deployment strategies and rollback.
• Define service level indicators and objectives (SLIs/SLOs), monitoring, dashboards and actionable alerting; participate in on call, incident response, root-cause analysis and blameless postmortems.
• Improve reliability, availability, performance, capacity and recoverability while reducing operational toil through automation and self-service platform capabilities.
• Implement observability with Azure Monitor, Application Insights, Log Analytics and KQL, including centralized diagnostic settings and production health monitoring.
• Enforce security and governance using Microsoft Entra ID, managed identities, least-privilege Azure RBAC, workload identity federation, Azure Policy and Key Vault.
• Design secretless deployment patterns where possible and enforce private connectivity, certificate lifecycle management, secure logging and restricted data-plane access.
• Support governance and compliance requirements for regulated workloads, including PCI-DSS and
GLBA controls, audit evidence and remediation activities.
• Implement cost-management practices including tagging standards, budgets, ownership visibility and resource optimization.
• Support integrations with enterprise technologies such as Okta CIAM, Akamai, Azure App Configuration and Octopus Deploy.
• Use AI tools such as Claude to assist with IaC and code development, code review, log/incident analysis, troubleshooting, test generation and documentation while independently validating correctness, security and production readiness.
• Document architecture decisions, operational procedures, production-readiness requirements, troubleshooting guides and runbooks.
• Mentor engineers, review infrastructure and automation pull requests, and establish reusable platform engineering standards for application teams.

Requirements

• 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure or platform engineering, with strong production support experience.
• Strong Microsoft Azure engineering experience across networking, compute, containers, identity, security, governance, storage and monitoring.
• Advanced Terraform and hands-on Bicep experience, including reusable module design, state management, imports, plan/what-if review and drift detection.
• Strong hands-on development and automation skills in .NET/C#, Python and PowerShell; ability to build maintainable tooling rather than relying only on administrative scripts.
• Experience building REST/API integrations and working with JSON, YAML, Git and common software engineering practices such as code review, testing, logging and error handling.
• Hands-on experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates and secure authentication.
• Experience with AKS, Azure Container Apps, Docker and Azure Container Registry, or equivalent Kubernetes/container platforms.
• Solid SRE practices including SLIs/SLOs, observability, incident management, root-cause analysis, postmortems, capacity planning and operational automation.
• Strong understanding of Microsoft Entra ID, managed identities, Azure RBAC, Key Vault, workload identity federation and least-privilege security.
• Experience with Azure Monitor, Application Insights, Log Analytics and KQL for production troubleshooting and observability.
• Ability to troubleshoot across application code, CI/CD, containers, Azure services, networking, identity
and observability layers.
• Daily, effective use of AI-assisted engineering tools such as Claude, with critical review of AI-generated
code, IaC and recommendations before production use.
• Strong technical documentation and professional English communication skills.
Nice to have
• Azure or Terraform certifications, for example AZ-400, AZ-305 or HashiCorp Terraform Associate.
• Experience in financial services or other regulated environments, particularly PCI-DSS and GLBA.
• Experience with Octopus Deploy and Windows Server/IIS deployment automation.
• Experience with Okta CIAM, OIDC/OAuth, MFA and identity automation.
• Experience with Akamai CDN, WAF, Bot Manager, EdgeWorkers or similar edge/security platforms.
• Experience with Azure Front Door Premium, Application Gateway WAF, Private Link and hybrid connectivity.
• Experience creating internal developer platforms, self-service automation or developer-experience tooling.
• Exposure to AI-assisted DevOps, Model Context Protocol (MCP), retrieval-augmented generation (RAG) or agentic automation.

What success looks like

• Azure infrastructure and governance are consistently delivered through code and controlled pipelines rather than manual portal changes.
• Production services have measurable reliability targets, useful telemetry, tested rollback/recovery paths and actionable alerts.
• Repetitive operational work is converted into secure, reusable .NET, Python or PowerShell automation.
• Application teams can consume standardized platform patterns with less dependency on manual DevOps intervention.
• Security, compliance and cost controls are built into the platform and delivery process instead of added after deployment.

Our benefits:

-Health and dental insurance

-Meal and food allowance

-Childcare assistance

-Extended paternity leave

-Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass;

-Profit Sharing and Results Participation (PLR);

-Life insurance

-Continuous learning platform (CI&T University);

-Discount club

-Free online platform dedicated to physical, mental, and overall well-being

-Pregnancy and responsible parenting course

-Partnerships with online learning platforms

-Language learning platform

And many more!

More details about our benefits here: https://ciandt.com/br/pt-br/carreiras

At CI&T, inclusion starts at the first contact. If you are a person with a disability, it is important to present your assessment during the selection process. See which data needs to be included in the report by clicking here.This way, we can ensure the support and accommodations that you deserve. If you do not yet have the assessment, don't worry: we can support you in obtaining it.

We have a dedicated Health and Well-being team, inclusion specialists, and affinity groups who will be with you at every stage. Count on us to make this journey side by side.