Senior Azure Cloud Platform Engineer

At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions. With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy. We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day. The Senior DevOps / SRE engineer designs, builds and operates secure, resilient Azure platforms and production services. The role combines cloud platform engineering, site reliability engineering, infrastructure as code, CI/CD and software automation. The engineer works primarily with Terraform and Bicep, develops automation and platform capabilities using .
NET/C#, Python and PowerShell, and uses AI-assisted engineering tools such as Claude to accelerate delivery and troubleshooting while critically validating generated output. Responsibilities Design, provision and maintain Azure landing zones, management groups, subscriptions, resource groups and shared platform services using Terraform and Bicep. Engineer Azure networking including hub-and-spoke VNets, NSGs, route tables, Azure Firewall, Front Door, Application Gateway/WAF, Private Link, Private DNS, VPN Gateway and ExpressRoute. Build reusable Terraform and Bicep modules, manage remote state, perform plan/what-if validation, detect configuration drift and promote infrastructure changes through pull-request review and approvals. Build and maintain CI/CD and release automation using Azure DevOps Pipelines and/or GitHub Actions; integrate Octopus Deploy where required. Develop production-quality cloud and DevOps tooling using .
NET/C#, Python and PowerShell, including APIs, Azure Functions, CLI utilities, integrations, compliance checks, reporting and operational automation. Build and operate containerized workloads on Azure Kubernetes Service (AKS) and Azure Container Apps, including container registries, scaling, health probes, deployment strategies and rollback. Define service level indicators and objectives (SLIs/SLOs), monitoring, dashboards and actionable alerting; participate in on call, incident response, root-cause analysis and blameless postmortems. Improve reliability, availability, performance, capacity and recoverability while reducing operational toil through automation and self-service platform capabilities. Implement observability with Azure Monitor, Application Insights, Log Analytics and KQL, including centralized diagnostic settings and production health monitoring. Enforce security and governance using Microsoft Entra ID, managed identities, least-privilege Azure RBAC, workload identity federation, Azure Policy and Key Vault. Design secretless deployment patterns where possible and enforce private connectivity, certificate lifecycle management, secure logging and restricted data-plane access. Support governance and compliance requirements for regulated workloads, including PCI-DSS and GLBA controls, audit evidence and remediation activities. Implement cost-management practices including tagging standards, budgets, ownership visibility and resource optimization. Support integrations with enterprise technologies such as Okta CIAM, Akamai, Azure App Configuration and Octopus Deploy. Use AI tools such as Claude to assist with IaC and code development, code review, log/incident analysis, troubleshooting, test generation and documentation while independently validating correctness, security and production readiness. Document architecture decisions, operational procedures, production-readiness requirements, troubleshooting guides and runbooks. Mentor engineers, review infrastructure and automation pull requests, and establish reusable platform engineering standards for application teams. Requirements 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure or platform engineering, with strong production support experience. Strong Microsoft Azure engineering experience across networking, compute, containers, identity, security, governance, storage and monitoring. Advanced Terraform and hands-on Bicep experience, including reusable module design, state management, imports, plan/what-if review and drift detection. Strong hands-on development and automation skills in .
NET/C#, Python and PowerShell; ability to build maintainable tooling rather than relying only on administrative scripts. Experience building REST/API integrations and working with JSON, YAML, Git and common software engineering practices such as code review, testing, logging and error handling. Hands-on experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates and secure authentication. Experience with AKS, Azure Container Apps, Docker and Azure Container Registry, or equivalen