Senior Azure Cloud Platform Engineer / SRE (Azure)

Location: Brazil; remote home office

Company

CI&T is a technology transformation company helping large enterprises apply AI, modernize applications, and build data, martech, and business solutions across more than 25 countries.

What you will do

• Design, provision, and operate Azure landing zones, subscriptions, shared services, networking, security, governance, and cost-management capabilities using Terraform and Bicep.
• Build reusable infrastructure modules and controlled delivery workflows with Azure DevOps Pipelines and/or GitHub Actions, including approvals, drift detection, and secure authentication.
• Develop production-quality cloud tooling, APIs, integrations, compliance checks, and operational automation with .NET/C#, Python, and PowerShell.
• Operate containerized workloads on AKS and Azure Container Apps, including scaling, deployment strategies, health monitoring, and rollback.
• Define SLI/SLO targets and implement observability, dashboards, alerting, incident response, root-cause analysis, and postmortems.
• Document platform standards and runbooks, review infrastructure changes, mentor engineers, and establish reusable self-service capabilities for application teams.

Requirements

• 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure, or platform engineering, including strong production support experience.
• Strong Microsoft Azure experience across networking, compute, containers, identity, security, governance, storage, and monitoring.
• Advanced Terraform and hands-on Bicep experience covering reusable modules, state management, imports, plan/what-if review, and drift detection.
• Strong hands-on development and automation skills in .NET/C#, Python, and PowerShell, with the ability to build maintainable tooling.
• Experience with REST/API integrations, JSON, YAML, Git, code review, testing, logging, and error handling.
• Experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates, and secure authentication.
• Experience with AKS, Azure Container Apps, Docker, Azure Container Registry, or equivalent Kubernetes/container platforms.
• Solid SRE practices, including SLIs/SLOs, observability, incident management, root-cause analysis, postmortems, capacity planning, and operational automation.
• Strong understanding of Microsoft Entra ID, managed identities, Azure RBAC, Key Vault, workload identity federation, least-privilege security, Azure Monitor, Application Insights, Log Analytics, and KQL.
• Ability to troubleshoot across application code, CI/CD, containers, Azure services, networking, identity, and observability layers.
• Daily effective use of AI-assisted engineering tools such as Claude, with critical review of generated code, IaC, and recommendations before production use.
• Strong technical documentation and professional English communication skills.

Nice to have

• Azure or Terraform certifications such as AZ-400, AZ-305, or HashiCorp Terraform Associate.
• Financial services or other regulated-environment experience, particularly PCI-DSS and GLBA.
• Octopus Deploy, Windows Server/IIS deployment automation, Okta CIAM, OIDC/OAuth, MFA, or identity automation experience.
• Akamai CDN, WAF, Bot Manager, EdgeWorkers, Azure Front Door Premium, Application Gateway WAF, Private Link, or hybrid connectivity experience.
• Experience creating internal developer platforms, self-service automation, or developer-experience tooling.
• Exposure to AI-assisted DevOps, Model Context Protocol, retrieval-augmented generation, or agentic automation.

Culture & Benefits

• Remote home-office work in Brazil.
• Work in a technology transformation organization with AI integrated into engineering and delivery practices.
• Build standardized platform patterns that reduce manual DevOps intervention for application teams.
• Support secure, reusable, and self-service engineering practices with embedded reliability, compliance, and cost controls.

Hiring process

• Present an assessment during the selection process.
• If the assessment is not yet available, support is provided to obtain it.