Senior Cloud Engineer

WEX; São Paulo; On-site; BRL 180,000 - 280,000; Full time

Job summary

WEX in São Paulo, Brazil is seeking an experienced Cloud Engineer - Azure to design, implement, automate, and support enterprise-scale Microsoft Azure cloud environments. You will own complex Azure infrastructure, troubleshoot production issues, and drive cloud engineering best practices across teams.

You will collaborate with architecture, security, application, and operations groups to deliver highly available, secure, scalable solutions, using IaC with Terraform and DevOps practices,

Qualifications

• Experience managing Azure subscriptions, VNets, and networking.
• Strong Terraform experience with modules and enterprise deployments.
• GitHub Actions and CI/CD automation expertise.

Responsibilities

• Design, deploy, configure, and support enterprise Azure environments.
• Manage Azure subscriptions, resource groups, policies, RBAC, and governance.
• Implement and maintain Azure networking solutions (VNets, NSGs, Private DNS, etc.).
• Manage compute, storage, databases, and platform services.
• Support multi-region architectures, disaster recovery, and high availability designs.
• Perform troubleshooting and root cause analysis for Azure infrastructure issues.
• Monitor cloud environments for availability, performance, security, and cost optimization.

Skills

Microsoft Azure

Azure networking

Terraform

GitHub Actions

CI/CD pipelines

RBAC

Monitoring

High availability

Education

Microsoft Certified: Azure Administrator Associate

Microsoft Certified: Azure Solutions Architect Expert

Tools

Azure DevOps

Azure CLI

PowerShell

Python

Terraform

Job description

CategoryRequired Skills

• Azure DevOps pipelines
• Azure CLI
• Azure RBAC
• Microsoft Certified: Azure Administrator Associate

Cloud PlatformMicrosoft Azure, subscriptions, resource groups, Azure services

Cloud Engineer - Azure

We are seeking an experienced Cloud Engineer - Azure to join our Cloud Engineering team. This role is responsible for designing, implementing, automating, and supporting enterprise-scale Microsoft Azure cloud environments. The ideal candidate will have strong hands-on experience managing Azure infrastructure, networking, identity, security, and automation using modern Infrastructure as Code (IaC) and DevOps practices.

The Cloud Engineer will work closely with architecture, security, application, and operations teams to build highly available, secure, scalable, and automated cloud solutions. This individual should be comfortable owning complex Azure environments, troubleshooting production issues, and driving cloud engineering best practices across the organization.

Key Responsibilities

• Design, deploy, configure, and support enterprise Azure environments.
• Manage Azure subscriptions, resource groups, policies, RBAC, and governance controls.
• Implement and maintain Azure networking solutions including:
  • Virtual Networks (VNets)
  • Subnets
  • Network Security Groups (NSGs)
  • Route Tables
  • Private Endpoints
  • Private DNS Zones
  • Azure Firewall and third-party network integrations
  • VPN and ExpressRoute connectivity
• Manage Azure compute, storage, databases, and platform services.
• Support multi-region Azure architectures, disaster recovery solutions, and high availability designs.
• Perform troubleshooting and root cause analysis for Azure infrastructure issues.
• Monitor cloud environments for availability, performance, security, and cost optimization.

Infrastructure as Code & Automation

• Develop and maintain Infrastructure as Code solutions using Terraform.
• Create reusable Terraform modules and standardized deployment patterns.
• Manage Terraform state, workflows, and enterprise deployment practices.
• Build automation solutions using:
  • GitHub Actions
  • Azure DevOps pipelines
  • PowerShell
  • Python
  • Azure CLI
• Automate provisioning, configuration, compliance checks, and operational processes.
• Implement CI/CD practices for infrastructure deployments.
• Participate in improving cloud automation frameworks and reducing manual operational activities.

GitHub & DevOps Engineering

• Strong experience with GitHub enterprise capabilities including:
  • Repository management
  • Branching strategies
  • Pull requests and code reviews
  • GitHub Actions workflows
  • Self-hosted runners
  • Secrets management
  • Integration with cloud deployment pipelines
• Develop and maintain automated deployment pipelines.
• Support DevOps engineering practices across development and infrastructure teams.
• Implement secure software delivery practices and automation standards.

Cloud Security & Governance

• Implement Azure security best practices including:
  • Azure RBAC
  • Managed identities
  • Key Vault integration
  • Encryption standards
  • Network security controls
  • Security policies
• Work with security teams to implement cloud governance requirements.
• Support compliance initiatives and cloud security assessments.
• Apply least privilege access principles.
• Assist with Azure Policy implementation and enforcement.

Operations & Support

• Provide advanced troubleshooting and operational support for Azure environments.
• Participate in incident response and production support activities.
• Analyze performance, capacity, and availability metrics.
• Create technical documentation including:
  • Architecture diagrams
  • Runbooks
  • Standard operating procedures
  • Knowledge articles
• Participate in on-call rotation as required.

Required Qualifications

• Strong understanding of Azure architecture and cloud networking concepts.
• Proven experience managing:
  • Azure subscriptions
  • VNets and networking
  • Identity and access management
  • Compute and storage services
  • Private connectivity solutions
• Strong Terraform experience including module development and enterprise deployments.
• Strong GitHub experience including GitHub Actions and CI/CD automation.
• Strong scripting experience with PowerShell, Python, or similar languages.
• Experience supporting production enterprise cloud environments.

Preferred Qualifications

• Azure certifications such as:
  • Microsoft Certified: Azure Administrator Associate
  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft Certified: DevOps Engineer Expert
• Experience with multi-cloud environments (AWS/GCP).
• Experience implementing cloud governance frameworks.
• Experience with security tools, monitoring platforms, and automation frameworks.
• Experience supporting enterprise-scale landing zones.

Core Skills

CategoryRequired Skills

Cloud PlatformMicrosoft Azure, subscriptions, resource groups, Azure services

NetworkingVNets, subnets, NSGs, routing, private endpoints, DNS, connectivity

Infrastructure as CodeTerraform, Terraform modules, state management

AutomationGitHub Actions, PowerShell, Python, Azure CLI

DevOpsGitHub Enterprise, CI/CD pipelines, branching strategies

SecurityRBAC, Key Vault, Managed Identity, Azure Policy

OperationsMonitoring, troubleshooting, incident management

ArchitectureHigh availability, disaster recovery, scalable cloud design