Staff Engineer - Cloud Engineer

Nagarro; Región Centro; Presencial; MXN 900.000 - 1.500.000; Jornada completa

Descripción de la vacante

Nagarro in Mexico seeks a Senior DevOps/Cloud Engineer to architect and deliver IaC using Terraform/Terragrunt, with deep AWS and Azure networking expertise. The role focuses on security, automation, and AI-driven development workflows across cloud and on-prem environments.

The ideal candidate brings strong Python, Docker, and DevSecOps skills, plus experience integrating AI into CI/CD pipelines and developer tooling. Join our dynamic, fast-growing team in a global company.

Formación

• 5+ years of software/platform/infrastructure engineering with IaC delivery.
• Strong Terraform/Terragrunt skills with established enterprise IaC patterns.
• Experience integrating AI into developer workflows and CI/CD pipelines.

Responsabilidades

• Architect and implement IaC using Terraform/Terragrunt across AWS and Azure.
• Manage secure networking, IAM and ID provisioning, and automation pipelines.
• Collaborate with global teams to improve AI-assisted development workflows.
• Establish and document standards for AI-enabled coding and reviews.

Conocimientos

Python

Docker

DevSecOps

AI tooling integration

SAST/SCA tooling

Herramientas

Terraform

Terragrunt

Azure providers (azurerm/azapi/azuread)

AWS networking (WAN/Firewall/Transit Gateway)

HashiCorp Boundary

GitHub Copilot / Claude Code

Linux

Descripción del empleo

We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale — across all devices and digital mediums, and our people exist everywhere in the world (15000+ experts across 26 countries, to be exact). Our work culture is dynamic and non-hierarchical. We are looking for great new colleagues. That is where you come in!

Job Description

• 5+ years of software/platform/infrastructure engineering with hands-on IaC delivery as a core responsibility
• Solid Terraform/Terragrunt skills against an established enterprise IaC module pattern; familiarity with azurerm, azapi, and azuread providers
• Working knowledge of HashiCorp Boundary or comparable access/session-brokering tooling; willingness and ability to go deep quickly
• Deep AWS networking experience: AWS Cloud WAN, AWS Network Firewall, AWS Transit Gateway, IPAM, and cross-cloud routing to Azure
• Azure resource provisioning: VNet routing, Private Endpoint/Private DNS, VM and domain-join familiarity
• Strong in Python for lifecycle automation and pipeline tooling
• Solid grounding in DevSecOps: SAST/SCA tooling (Veracode, SonarQube, or CodeQL), dependency and vulnerability remediation, secrets management
• Comfortable in Linux/shell, Docker, and operating production services
• Clear written communication: implementation notes, runbooks, and access-model documentation
• Daily, fluent use of Claude Code and/or GitHub Copilot for implementation, refactoring, test generation, and code review
• Ability to establish team standards for AI-assisted development: effective prompting, trust-vs-verify discipline on generated code, security/IP guardrails, and reviewing AI-authored changes
• Working understanding of LLM fundamentals: context windows, tokens, model selection, and prompt/context engineering
• Experience integrating AI into developer workflows and agentic/automation tooling (MCP servers, AI-driven CI steps, codegen and doc-generation pipelines)
• Able to evaluate AI tooling pragmatically: measuring real productivity and quality impact, not hype

Nice to have

• Microsoft Entra ID OIDC and on-prem Active Directory integration over ExpressRoute
• Experience with enterprise access platforms (PAM, zero-trust, session-brokering)
• GitHub Actions CI/CD pipeline experience

Qualifications

Must have skills : AWS CLOUD WAN AWS NETWORK FIREWALL AWS TRANSIT GATEWAY, Azure Resource provisioning, DevSecOps, Python (Strong), Terraform (Strong)