Senior Staff Engineer - Cloud Engineer

Nagarro; Región Centro; Presencial; MXN 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

Nagarro is seeking an experienced Senior Engineer in Mexico (Jalisco) to lead enterprise-scale cloud and platform initiatives. You will drive HashiCorp Boundary deployment and operation, design AWS/Azure networking paths, and implement Terraform-based infrastructure with a focus on security and automation.

You will collaborate with cross-functional teams, own runbooks and onboarding guides, and operate production services in a fast-paced, non-hierarchical environment.

Formación

• 8+ years in software/platform engineering with team leadership.
• Expertise in HashiCorp Boundary and AWS/Azure networking.
• Production Terraform/Terragrunt against enterprise IaC patterns.
• Strong Python for automation and tooling.
• Solid DevSecOps with SAST/SCA tooling and vulnerability remediation.
• On-call experience and incident/change management.

Conocimientos

HashiCorp Boundary Expert

AWS networking

Azure networking

Python

Terraform/Terragrunt

DevSecOps

Linux/bash

Docker

Communication

Herramientas

Terraform

Terragrunt

azurerm

azuread

Veracode

SonarQube

CodeQL

AWS Network Firewall

AWS Transit Gateway

Descripción del empleo

Company Description

We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale — across all devices and digital mediums, and our people exist everywhere in the world (15000+ experts across 26 countries, to be exact). Our work culture is dynamic and non-hierarchical. We are looking for great new colleagues. That is where you come in!

Job Description

Required qualifications:

• 8+ years of software/platform engineering, with demonstrated technical leadership of a team or major workstream
• Expert in HashiCorp Boundary: both deployment (controllers/workers, SSH/RDP/database brokering, session recording, Entra ID OIDC, on-prem AD over ExpressRoute) and the operational access model (scopes, roles, grants, principal mapping, user onboarding)
• Deep AWS networking experience and a working understanding of enterprise cross-cloud network engineering: AWS Cloud WAN, AWS Network Firewall, AWS Transit Gateway, IPAM; and the routing path from AWS to Azure
• Strong Azure networking: VNet routing, Private Endpoint/Private DNS, NSG and route-table design for Boundary worker-to-target paths
• Production Terraform/Terragrunt against an established enterprise IaC module pattern; familiarity with azurerm, azapi, and azuread providers
• Strong in Python for lifecycle automation and pipeline tooling
• Solid grounding in DevSecOps: SAST/SCA tooling (Veracode, SonarQube, or CodeQL), dependency and vulnerability remediation, secrets management
• Comfortable in Linux/shell, Docker, and operating production services (on-call, incident/change management)
• Excellent written communication: pattern documentation, runbooks, and onboarding guides that future organizations will use to adopt this platform

AI Skills

• Daily, fluent use of Claude Code and/or GitHub Copilot for implementation, refactoring, test generation, and code review
• Ability to establish team standards for AI-assisted development: effective prompting, trust-vs-verify discipline on generated code, security/IP guardrails, and reviewing AI-authored changes
• Working understanding of LLM fundamentals: context windows, tokens, model selection, and prompt/context engineering
• Experience integrating AI into developer workflows and agentic/automation tooling (MCP servers, AI-driven CI steps, codegen and doc-generation pipelines)
• Able to evaluate AI tooling pragmatically: measuring real productivity and quality impact, not hype

Nice to have

• Experience with RDP session recording compensating controls or supplementary tooling
• Azure VM domain-join and on-prem DNS troubleshooting at depth
• GitHub Actions and CI/CD pipeline authoring

Qualifications

Must have skills: Azure VNet routing Private Endpoint Private DNS NSG ROUTETABLE DESIGN, Python (Strong), Terraform (Strong), aws cloud wan aws network firewall aws transit gateway IPAM, hashiCorp Boundary Expert