Empresa: CI&T
At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions. With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy. We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day. The Senior DevOps / SRE engineer designs, builds and operates secure, resilient Azure platforms and production services. The role combines cloud platform engineering, site reliability engineering, infrastructure as code, CI/CD and software automation. The engineer works primarily with Terraform and Bicep, develops automation and platform capabilities using .NET/C#, Python and PowerShell, and uses AI-assisted engineering tools such as Claude to accelerate delivery and troubleshooting while critically validating generated output. Responsibilities • Design, provision and maintain Azure landing zones, management groups, subscriptions, resource groups and shared platform services using Terraform and Bicep. • Engineer Azure networking including hub-and-spoke VNets, NSGs, route tables, Azure Firewall, Front Door, Application Gateway/WAF, Private Link, Private DNS, VPN Gateway and ExpressRoute. • Build reusable Terraform and Bicep modules, manage remote state, perform plan/what-if validation, detect configuration drift and promote infrastructure changes through pull-request review and approvals. • Build and maintain CI/CD and release automation using Azure DevOps Pipelines and/or GitHub Actions; integrate Octopus Deploy where required. • Develop production-quality cloud and DevOps tooling using .NET/C#, Python and PowerShell, including APIs, Azure Functions, CLI utilities, integrations, compliance checks, reporting and operational automation. • Build and operate containerized workloads on Azure Kubernetes Service (AKS) and Azure Container Apps, including container registries, scaling, health probes, deployment strategies and rollback. • Define service level indicators and objectives (SLIs/SLOs), monitoring, dashboards and actionable alerting; participate in on call, incident response, root-cause analysis and blameless postmortems. • Improve reliability, availability, performance, capacity and recoverability while reducing operational toil through automation and self-service platform capabilities. • Implement observability with Azure Monitor, Application Insights, Log Analytics and KQL, including centralized diagnostic settings and production health monitoring. • Enforce security and governance using Microsoft Entra ID, managed identities, least-privilege Azure RBAC, workload identity federation, Azure Policy and Key Vault. • Design secretless deployment patterns where possible and enforce private connectivity, certificate lifecycle management, secure logging and restricted data-plane access. • Support governance and compliance requirements for regulated workloads, including PCI-DSS and GLBA controls, audit evidence and remediation activities. • Implement cost-management practices including tagging standards, budgets, ownership visibility and resource optimization. • Support integrations with enterprise technologies such as Okta CIAM, Akamai, Azure App Configuration and Octopus Deploy. • Use AI tools such as Claude to assist with IaC and code development, code review, log/incident analysis, troubleshooting, test generation and documentation while independently validating correctness, security and production readiness. • Document architecture decisions, operational procedures, production-readiness requirements, troubleshooting guides and runbooks. • Mentor engineers, review infrastructure and automation pull requests, and establish reusable platform engineering standards for application teams. Requirements • 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure or platform engineering, with strong production support experience. • Strong Microsoft Azure engineering experience across networking, compute, containers, identity, security, governance, storage and monitoring. • Advanced Terraform and hands-on Bicep experience, including reusable module design, state management, imports, plan/what-if review and drift detection. • Strong hands-on development and automation skills in .NET/C#, Python and PowerShell; ability to build maintainable tooling rather than relying only on administrative scripts. • Experience building REST/API integrations and working with JSON, YAML, Git and common software engineering practices such as code review, testing, logging and error handling. • Hands-on experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates and secure authentication. • Experience with AKS, Azure Container Apps, Docker and Azure Container Registry, or equivalent Kubernetes/container platforms. • Solid SRE practices including SLIs/SLOs, observability, incident management, root-cause analysis, postmortems, capacity planning and operational automation. • Strong understanding of Microsoft Entra ID, managed identities, Azure RBAC, Key Vault, workload identity federation and least-privilege security. • Experience with Azure Monitor, Application Insights, Log Analytics and KQL for production troubleshooting and observability. • Ability to troubleshoot across application code, CI/CD, containers, Azure services, networking, identity and observability layers. • Daily, effective use of AI-assisted engineering tools such as Claude, with critical review of AI-generated code, IaC and recommendations before production use. • Strong technical documentation and professional English communication skills. Nice to have • Azure or Terraform certifications, for example AZ-400, AZ-305 or HashiCorp Terraform Associate. • Experience in financial services or other regulated environments, particularly PCI-DSS and GLBA. • Experience with Octopus Deploy and Windows Server/IIS deployment automation. • Experience with Okta CIAM, OIDC/OAuth, MFA and identity automation. • Experience with Akamai CDN, WAF, Bot Manager, EdgeWorkers or similar edge/security platforms. • Experience with Azure Front Door Premium, Application Gateway WAF, Private Link and hybrid connectivity. • Experience creating internal developer platforms, self-service automation or developer-experience tooling. • Exposure to AI-assisted DevOps, Model Context Protocol (MCP), retrieval-augmented generation (RAG) or agentic automation. What success looks like • Azure infrastructure and governance are consistently delivered through code and controlled pipelines rather than manual portal changes. • Production services have measurable reliability targets, useful telemetry, tested rollback/recovery paths and actionable alerts. • Repetitive operational work is converted into secure, reusable .NET, Python or PowerShell automation. • Application teams can consume standardized platform patterns with less dependency on manual DevOps intervention. • Security, compliance and cost controls are built into the platform and delivery process instead of added after deployment. Our benefits: -Health and dental insurance -Meal and food allowance -Childcare assistance -Extended paternity leave -Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass; - Profit Sharing and Results Participation (PLR); -Life insurance - Continuous learning platform (CI&T University); -Discount club -Free online platform dedicated to physical, mental, and overall well-being -Pregnancy and responsible parenting course -Partnerships with online learning platforms -Language learning platform And many more! More details about our benefits here: https://ciandt.com/br/pt-br/carreiras At CI&T, inclusion starts at the first contact. If you are a person with a disability, it is important to present your assessment during the selection process. See which data needs to be included in the report by clicking here . This way, we can ensure the support and accommodations that you deserve. If you do not yet have the assessment, don't worry: we can support you in obtaining it. We have a dedicated Health and Well-being team, inclusion specialists, and affinity groups who will be with you at every stage. Count on us to make this journey side by side.