At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.
With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.
We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.
The Senior DevOps / SRE engineer designs, builds and operates secure, resilient Azure platforms and production services. The role combines cloud platform engineering, site reliability engineering, infrastructure as code, CI/CD and software automation. The engineer works primarily with Terraform and
Bicep, develops automation and platform capabilities using .NET/C#, Python and Power
Shell, and uses AI-assisted engineering tools such as Claude to accelerate delivery and troubleshooting while critically validating generated output.
Responsibilities
- Design, provision and maintain Azure landing zones, management groups, subscriptions, resource groups and shared platform services using Terraform and Bicep.
- Engineer Azure networking including hub-and-spoke VNets, NSGs, route tables, Azure Firewall, Front Door, Application Gateway/WAF, Private Link, Private DNS, VPN Gateway and Express
Route.
- Build reusable Terraform and Bicep modules, manage remote state, perform plan/what-if validation, detect configuration drift and promote infrastructure changes through pull-request review and approvals.
- Build and maintain CI/CD and release automation using Azure DevOps Pipelines and/or GitHub Actions; integrate Octopus Deploy where required.
- Develop production-quality cloud and DevOps tooling using .NET/C#, Python and Power
Shell, including APIs, Azure Functions, CLI utilities, integrations, compliance checks, reporting and operational automation.
- Build and operate containerized workloads on Azure Kubernetes Service (AKS) and Azure Container Apps, including container registries, scaling, health probes, deployment strategies and rollback.
- Define service level indicators and objectives (SLIs/SLOs), monitoring, dashboards and actionable alerting; participate in on call, incident response, root-cause analysis and blameless postmortems.
- Improve reliability, availability, performance, capacity and recoverability while reducing operational toil through automation and self-service platform capabilities.
- Implement observability with Azure Monitor, Application Insights, Log Analytics and KQL, including centralized diagnostic settings and production health monitoring.
- Enforce security and governance using Microsoft Entra ID, managed identities, least-privilege Azure RBAC, workload identity federation, Azure Policy and Key Vault.
- Design secretless deployment patterns where possible and enforce private connectivity, certificate lifecycle management, secure logging and restricted data-plane access.
- Support governance and compliance requirements for regulated workloads, including PCI-DSS and
- GLBA controls, audit evidence and remediation activities.
- Implement cost-management practices including tagging standards, budgets, ownership visibility and resource optimization.
- Support integrations with enterprise technologies such as Okta CIAM, Akamai, Azure App Configuration and Octopus Deploy.
- Use AI tools such as Claude to assist with IaC and code development, code review, log/incident analysis, troubleshooting, test generation and documentation while independently validating correctness, security and production readiness.
- Document architecture decisions, operational procedures, production-readiness requirements, troubleshooting guides and runbooks.
- Mentor engineers, review infrastructure and automation pull requests, and establish reusable platform engineering standards for application teams.
- Requirements
- 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure or platform engineering, with strong production support experience.
- Strong Microsoft Azure engineering experience across networking, compute, containers, identity, security, governance, storage and monitoring.
- Advanced Terraform and hands-on Bicep experience, including reusable module design, state management, imports, plan/what-if review and drift detection.
- Strong hands-on development and automation skills in .NET/C#, Python and Power
- Shell; ability to build maintainable tooling rather than relying only on administrative scripts.
- Experience building REST/API integrations and working with JSON, YAML, Git and common software engineering practices such as code review, testing, logging and error handling.
- Hands-on experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates and secure authentication.
- Experience with AKS, Azure Container Apps, Docker and Azure Container Registry, or equivalent Kubernetes/container platforms.
- Solid SRE practices including SLIs/SLOs, observability, incident management, root-cause analysis, postmortems, capacity planning and operational automation.
- Strong understanding of Microsoft Entra ID, managed identities, Azure RBAC, Key Vault, workload identity federation and least-privilege security.
- Experience with Azure Monitor, Application Insights, Log Analytics and KQL for production troubleshooting and observability.
- Ability to troubleshoot across application code, CI/CD, containers, Azure services, networking, identity
- and observability layers.
- Daily, effective use of AI-assisted engineering tools such as Claude, with critical review of AI-generated
- code, IaC and recommendations before production use.
- Strong technical documentation and professional English communication skills.
- Nice to have
- Azure or Terraform certifications, for example AZ-400, AZ-305 or Hashi
- Corp Terraform Associate.
- Experience in financial services or other regulated environments, particularly PCI-DSS and GLBA.
- Experience with Octopus Deploy and Windows Server/IIS deployment automation.
- Experience with Okta CIAM, OIDC/OAuth, MFA and identity automation.
- Experience with Akamai CDN, WAF, Bot Manager, EdgeWorkers or similar edge/security platforms.
- Experience with Azure Front Door Premium, Application Gateway WAF, Private Link and hybrid connectivity.
- Experience creating internal developer platforms, self-service automation or developer-experience tooling.
- Exposure to AI-assisted DevOps, Model Context Protocol (MCP), retrieval-augmented generation (RAG) or agentic automation.
- What success looks like
- Azure infrastructure and governance are consistently delivered through code and controlled pipelines rather than manual portal changes.
- Production services have measurable reliability targets, useful telemetry, tested rollback/recovery paths and actionable alerts.
- Repetitive operational work is converted into secure, reusable .NET, Python or Power
- Shell automation.
- Application teams can consume standardized platform patterns with less dependency on manual DevOps intervention.
- Security, compliance and cost controls are built into the platform and delivery process instead of added after deployment.
Our benefits:
-Health and dental insurance
-Meal and food allowance
-Childcare assistance
-Extended paternity leave
-Partnership with gyms and health and wellness professionals via Wellhub (Gympass) Total
Pass;
- Profit Sharing and Results Participation (PLR);
-Life insurance
- Continuous learning platform (CI&T University);
-Discount club
-Free online platform dedicated to physical, mental, and overall well-being
-Pregnancy and responsible parenting course
-Partnerships with online learning platforms
-Language learning platform
And many more!
More details about our benefits here: https://ciandt.com/br/pt-br/carreiras
At CI&T, inclusion starts at the first contact. If you are a person with a disability, it is important to present your assessment during the selection process. See which data needs to be included in the report by clicking here . This way, we can ensure the support and accommodations that you deserve. If you do not yet have the assessment, don't worry: we can support you in obtaining it.
We have a dedicated Health and Well-being team, inclusion specialists, and affinity groups who will be with you at every stage. Count on us to make this journey side by side.
