[Job - 32506] Senior Azure Cloud Platform Engineer / Sre, Brazil

The Senior DevOps / SRE engineer designs, builds and operates secure, resilient Azure platforms and production services. The role combines cloud platform engineering, site reliability engineering, infrastructure as code, CI/CD and software automation. The engineer works primarily with Terraform and
Bicep, develops automation and platform capabilities using .NET/C#, Python and PowerShell, and uses AI-assisted engineering tools such as Claude to accelerate delivery and troubleshooting while critically validating generated output.
Responsibilities
• Design, provision and maintain Azure landing zones, management groups, subscriptions, resource groups and shared platform services using Terraform and Bicep.
• Engineer Azure networking including hub-and-spoke VNets, NSGs, route tables, Azure Firewall, Front Door, Application Gateway/WAF, Private Link, Private DNS, VPN Gateway and ExpressRoute.
• Build reusable Terraform and Bicep modules, manage remote state, perform plan/what-if validation, detect configuration drift and promote infrastructure changes through pull-request review and approvals.
• Build and maintain CI/CD and release automation using Azure DevOps Pipelines and/or GitHub Actions; integrate Octopus Deploy where required.
• Develop production-quality cloud and DevOps tooling using .NET/C#, Python and PowerShell, including APIs, Azure Functions, CLI utilities, integrations, compliance checks, reporting and operational automation.
• Build and operate containerized workloads on Azure Kubernetes Service (AKS) and Azure Container Apps, including container registries, scaling, health probes, deployment strategies and rollback.
• Define service level indicators and objectives (SLIs/SLOs), monitoring, dashboards and actionable alerting; participate in on call, incident response, root-cause analysis and blameless postmortems.
• Improve reliability, availability, performance, capacity and recoverability while reducing operational toil through automation and self-service platform capabilities.
• Implement observability with Azure Monitor, Application Insights, Log Analytics and KQL, including centralized diagnostic settings and production health monitoring.
• Enforce security and governance using Microsoft Entra ID, managed identities, least-privilege Azure RBAC, workload identity federation, Azure Policy and Key Vault.
• Design secretless deployment patterns where possible and enforce private connectivity, certificate lifecycle management, secure logging and restricted data-plane access.
• Support governance and compliance requirements for regulated workloads, including PCI-DSS and
GLBA controls, audit evidence and remediation activities.
• Implement cost-management practices including tagging standards, budgets, ownership visibility and resource optimization.
• Support integrations with enterprise technologies such as Okta CIAM, Akamai, Azure App Configuration and Octopus Deploy.
• Use AI tools such as Claude to assist with IaC and code development, code review, log/incident analysis, troubleshooting, test generation and documentation while independently validating correctness, security and production readiness.
• Document architecture decisions, operational procedures, production-readiness requirements, troubleshooting guides and runbooks.
• Mentor engineers, review infrastructure and automation pull requests, and establish reusable platform engineering standards for application teams.
Requirements
• 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure or platform engineering, with strong production support experience.
• Strong Microsoft Azure engineering experience across networking, compute, containers, identity, security, governance, storage and monitoring.
• Advanced Terraform and hands-on Bicep experience, including reusable module design, state management, imports, plan/what-if review and drift detection.
• Strong hands-on development and automation skills in .NET/C#, Python and PowerShell; ability to build maintainable tooling rather than relying only on administrative scripts.
• Experience building REST/API integrations and working with JSON, YAML, Git and common software engineering practices such as code review, testing, logging and error handling.
• Hands-on experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates and secure authentication.
• Experience with AKS, Azure Container Apps, Docker and Azure Container Registry, or equivalent Kubernetes/container platforms.
• Solid SRE practices including SLIs/SLOs, observability, incident management, root-cause analysis, postmortems, capacity planning and operational automation.
• Strong understanding of Microsoft Entra ID, managed identities, Azure RBAC, Key Vault, workload identity federation and least-privilege security.
• Experience with