Senior Azure Cloud Platform Engineer / SRE, Brazil

CI&T; Brasil; Presencial; BRL 180 000 - 300 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health and dental insurance

Meal and food allowance

Extended paternity leave

Wellhub (Gympass) TotalPass

Profit Sharing and Results

Life insurance

Continuous learning platform

Language learning platform

Resumo da oferta

CI&T in Brazil seeks a Senior DevOps / SRE engineer to design, build and operate secure Azure platforms with IaC, CI/CD and automation.

You will work with Terraform, Bicep, .NET/C#, Python and PowerShell, drive reliability with SLIs/SLOs, and mentor teams while integrating AI-assisted tooling.

Qualificações

• 5+ years in DevOps/SRE with production support.
• Strong Azure engineering across networking, compute, containers, identity, security, governance, storage and monitoring.
• Advanced Terraform and hands-on Bicep with reusable modules and drift detection.
• Hands-on development in .NET/C#, Python and PowerShell to build tooling.
• Experience with REST/API integrations, JSON/YAML, Git, CI/CD pipelines and code review.
• Experience with Azure DevOps and/or GitHub Actions; YAML pipelines and approvals.
• Experience with AKS, Azure Container Apps, Docker and container registries.
• Solid SRE practices: SLIs/SLOs, observability, incident mgmt, postmortems, capacity planning.
• Strong knowledge of Azure Monitor, Application Insights, Log Analytics and KQL.
• Excellent technical documentation and professional English communication.

Responsabilidades

• Design, provision and maintain Azure landing zones, subscriptions and shared services.
• Engineer Azure networking including hub-and-spoke, firewall, Front Door, WAF and Private Link.
• Build and manage Terraform/Bicep modules and control state with review gates.
• Create CI/CD and release automation using Azure DevOps/GitHub Actions; integrate Octopus Deploy where needed.
• Develop production-grade tooling in .NET/C#, Python and PowerShell; expose APIs and runbooks.
• Operate containerized workloads on AKS and Azure Container Apps; manage deployments and health checks.
• Define SLIs/SLOs, monitoring dashboards and alerting; participate in on-call and postmortems.
• Improve reliability and reduce toil via automation and self-service platform capabilities.
• Enforce security, governance, cost controls and private connectivity across platforms.
• Document architecture decisions and mentor engineers on platform engineering standards.

Conhecimentos

DevOps experience

Azure engineering

Terraform & Bicep

SRE practices

CI/CD automation

Programming (.NET/C#, Python, Power)

Observability & monitoring

Security & governance

AI-assisted tooling

Ferramentas

Azure DevOps

GitHub Actions

Octopus Deploy

AKS

Azure Container Apps

Docker

Azure Monitor

Application Insights

Log Analytics

KQL

Terraform

Bicep

Descrição da oferta de emprego

At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.

With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.

We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.

The Senior DevOps / SRE engineer designs, builds and operates secure, resilient Azure platforms and production services. The role combines cloud platform engineering, site reliability engineering, infrastructure as code, CI/CD and software automation. The engineer works primarily with Terraform and
Bicep, develops automation and platform capabilities using .NET/C#, Python and PowerShell, and uses AI-assisted engineering tools such as Claude to accelerate delivery and troubleshooting while critically validating generated output.

Responsibilities

• Design, provision and maintain Azure landing zones, management groups, subscriptions, resource groups and shared platform services using Terraform and Bicep.
• Engineer Azure networking including hub-and-spoke VNets, NSGs, route tables, Azure Firewall, Front Door, Application Gateway/WAF, Private Link, Private DNS, VPN Gateway and ExpressRoute.
• Build reusable Terraform and Bicep modules, manage remote state, perform plan/what-if validation, detect configuration drift and promote infrastructure changes through pull-request review and approvals.
• Build and maintain CI/CD and release automation using Azure DevOps Pipelines and/or GitHub Actions; integrate Octopus Deploy where required.
• Develop production-quality cloud and DevOps tooling using .NET/C#, Python and PowerShell, including APIs, Azure Functions, CLI utilities, integrations, compliance checks, reporting and operational automation.
• Build and operate containerized workloads on Azure Kubernetes Service (AKS) and Azure Container Apps, including container registries, scaling, health probes, deployment strategies and rollback.
• Define service level indicators and objectives (SLIs/SLOs), monitoring, dashboards and actionable alerting; participate in on call, incident response, root-cause analysis and blameless postmortems.
• Improve reliability, availability, performance, capacity and recoverability while reducing operational toil through automation and self-service platform capabilities.
• Implement observability with Azure Monitor, Application Insights, Log Analytics and KQL, including centralized diagnostic settings and production health monitoring.
• Enforce security and governance using Microsoft Entra ID, managed identities, least-privilege Azure RBAC, workload identity federation, Azure Policy and Key Vault.
• Design secretless deployment patterns where possible and enforce private connectivity, certificate lifecycle management, secure logging and restricted data-plane access.
• Support governance and compliance requirements for regulated workloads, including PCI-DSS and GLBA controls, audit evidence and remediation activities.
• Implement cost-management practices including tagging standards, budgets, ownership visibility and resource optimization.
• Support integrations with enterprise technologies such as Okta CIAM, Akamai, Azure App Configuration and Octopus Deploy.
• Use AI tools such as Claude to assist with IaC and code development, code review, log/incident analysis, troubleshooting, test generation and documentation while independently validating correctness, security and production readiness.
• Document architecture decisions, operational procedures, production-readiness requirements, troubleshooting guides and runbooks.
• Mentor engineers, review infrastructure and automation pull requests, and establish reusable platform engineering standards for application teams.

Requirements

• 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure or platform engineering, with strong production support experience.
• Strong Microsoft Azure engineering experience across networking, compute, containers, identity, security, governance, storage and monitoring.
• Advanced Terraform and hands-on Bicep experience, including reusable module design, state management, imports, plan/what-if review and drift detection.
• Strong hands-on development and automation skills in .NET/C#, Python and PowerShell; ability to build maintainable tooling rather than relying only on administrative scripts.
• Experience building REST/API integrations and working with JSON, YAML, Git and common software engineering practices such as code review, testing, logging and error handling.
• Hands-on experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates and secure authentication.
• Experience with AKS, Azure Container Apps, Docker and Azure Container Registry, or equivalent Kubernetes/container platforms.
• Solid SRE practices including SLIs/SLOs, observability, incident management, root-cause analysis, postmortems, capacity planning and operational automation.
• Strong understanding of Microsoft Entra ID, managed identities, Azure RBAC, Key Vault, workload identity federation and least-privilege security.
• Experience with Azure Monitor, Application Insights, Log Analytics and KQL for production troubleshooting and observability.
• Ability to troubleshoot across application code, CI/CD, containers, Azure services, networking, identity and observability layers.
• Daily, effective use of AI-assisted engineering tools such as Claude, with critical review of AI-generated code, IaC and recommendations before production use.
• Strong technical documentation and professional English communication skills.
• Nice to have
• Azure or Terraform certifications, for example AZ-400, AZ-305 or HashiCorp Terraform Associate.
• Experience in financial services or other regulated environments, particularly PCI-DSS and GLBA.
• Experience with Octopus Deploy and Windows Server/IIS deployment automation.
• Experience with Okta CIAM, OIDC/OAuth, MFA and identity automation.
• Experience with Akamai CDN, WAF, Bot Manager, EdgeWorkers or similar edge/security platforms.
• Experience with Azure Front Door Premium, Application Gateway WAF, Private Link and hybrid connectivity.
• Experience creating internal developer platforms, self-service automation or developer-experience tooling.
• Exposure to AI-assisted DevOps, Model Context Protocol (MCP), retrieval-augmented generation (RAG) or agentic automation.

What success looks like

• Azure infrastructure and governance are consistently delivered through code and controlled pipelines rather than manual portal changes.
• Production services have measurable reliability targets, useful telemetry, tested rollback/recovery paths and actionable alerts.
• Repetitive operational work is converted into secure, reusable .NET, Python or PowerShell automation.
• Application teams can consume standardized platform patterns with less dependency on manual DevOps intervention.
• Security, compliance and cost controls are built into the platform and delivery process instead of added after deployment.

Benefits

• -Health and dental insurance
• -Meal and food allowance
• -Extended paternity leave
• -Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass;
• - Profit Sharing and Results Participation (PLR);
• -Life insurance
• - Continuous learning platform (CI&T University);
• -Discount club
• -Free online platform dedicated to physical, mental, and overall well-being
• -Pregnancy and responsible parenting course
• -Partnerships with online learning platforms
• -Language learning platform
• And many more!

More details about our benefits here: https://ciandt.com/br/pt-br/carreiras

At CI&T, inclusion starts at the first contact. If you are a person with a disability, it is important to present your assessment during the selection process. See which data needs to be included in the report by clicking here. If you do not yet have the assessment, don't worry: we can support you in obtaining it.

We have a dedicated Health and Well-being team, inclusion specialists, and affinity groups who will be with you at every stage. Count on us to make this journey side by side.