Senior Azure Cloud Platform Engineer / SRE, Brazil

The Senior DevOps / SRE engineer designs, builds and operates secure, resilient Azure platforms and production services. The role combines cloud platform engineering, site reliability engineering, infrastructure as code, CI/CD and software automation. The engineer works primarily with Terraform and

Bicep, develops automation and platform capabilities using .NET/C#, Python and PowerShell, and uses AI-assisted engineering tools such as Claude to accelerate delivery and troubleshooting while critically validating generated output.

Responsibilities

• Design, provision and maintain Azure landing zones, management groups, subscriptions, resource groups and shared platform services using Terraform and Bicep.
• Engineer Azure networking including hub-and-spoke VNets, NSGs, route tables, Azure Firewall, Front Door, Application Gateway/WAF, Private Link, Private DNS, VPN Gateway and ExpressRoute.
• Build reusable Terraform and Bicep modules, manage remote state, perform plan/what-if validation, detect configuration drift and promote infrastructure changes through pull-request review and approvals.
• Build and maintain CI/CD and release automation using Azure DevOps Pipelines and/or GitHub Actions; integrate Octopus Deploy where required.
• Develop production-quality cloud and DevOps tooling using .NET/C#, Python and PowerShell, including APIs, Azure Functions, CLI utilities, integrations, compliance checks, reporting and operational automation.
• Build and operate containerized workloads on Azure Kubernetes Service (AKS) and Azure Container Apps, including container registries, scaling, health probes, deployment strategies and rollback.
• Define service level indicators and objectives (SLIs/SLOs), monitoring, dashboards and actionable alerting; participate in on call, incident response, root-cause analysis and blameless postmortems.
• Improve reliability, availability, performance, capacity and recoverability while reducing operational toil through automation and self-service platform capabilities.
• Implement observability with Azure Monitor, Application Insights, Log Analytics and KQL, including centralized diagnostic settings and production health monitoring.
• Enforce security and governance using Microsoft Entra ID, managed identities, least-privilege Azure RBAC, workload identity federation, Azure Policy and Key Vault.
• Design secretless deployment patterns where possible and enforce private connectivity, certificate lifecycle management, secure logging and restricted data-plane access.
• Support governance and compliance requirements for regulated workloads, including PCI-DSS and

GLBA controls, audit evidence and remediation activities.

• Implement cost-management practices including tagging standards, budgets, ownership visibility and resource optimization.
• Support integrations with enterprise technologies such as Okta CIAM, Akamai, Azure App Configuration and Octopus Deploy.
• Use AI tools such as Claude to assist with IaC and code development, code review, log/incident analysis, troubleshooting, test generation and documentation while independently validating correctness, security and production readiness.
• Document architecture decisions, operational procedures, production-readiness requirements, troubleshooting guides and runbooks.
• Mentor engineers, review infrastructure and automation pull requests, and establish reusable platform engineering standards for application teams.

Requirements

• 5+ years of hands-on experience in DevOps, SRE, cloud infrastructure or platform engineering, with strong production support experience.
• Strong Microsoft Azure engineering experience across networking, compute, containers, identity, security, governance, storage and monitoring.
• Advanced Terraform and hands-on Bicep experience, including reusable module design, state management, imports, plan/what-if review and drift detection.
• Strong hands-on development and automation skills in .NET/C#, Python and PowerShell; ability to build maintainable tooling rather than relying only on administrative scripts.
• Experience building REST/API integrations and working with JSON, YAML, Git and common software engineering practices such as code review, testing, logging and error handling.
• Hands-on experience with Azure DevOps and/or GitHub Actions, including YAML pipelines, approvals/checks, branch policies, reusable templates and secure authentication.
• Experience with AKS, Azure Container Apps, Docker and Azure Container Registry, or equivalent Kubernetes/container platforms.
• Solid SRE practices including SLIs/SLOs, observability, incident management, root-cause analysis, postmortems, capacity planning and operational automation.
• Strong understanding of Microsoft Entra ID, managed identities, Azure RBAC, Key Vault, workload identity federation and least-privilege security.
• Experience with Azure Monitor, Application Insights, Log Analytics and KQL for production troubleshooting and observability.
• Ability to troubleshoot across application code, CI/CD, containers, Azure services, networking, identity

and observability layers.

• Daily, effective use of AI-assisted engineering tools such as Claude, with critical review of AI-generated

code, IaC and recommendations before production use.

• Strong technical documentation and professional English communication skills.

Nice to have

• Azure or Terraform certifications, for example AZ-400, AZ-305 or HashiCorp Terraform Associate.
• Experience in financial services or other regulated environments, particularly PCI-DSS and GLBA.
• Experience with Octopus Deploy and Windows Server/IIS deployment automation.
• Experience with Okta CIAM, OIDC/OAuth, MFA and identity automation.
• Experience with Akamai CDN, WAF, Bot Manager, EdgeWorkers or similar edge/security platforms.
• Experience with Azure Front Door Premium, Application Gateway WAF, Private Link and hybrid connectivity.
• Experience creating internal developer platforms, self-service automation or developer-experience tooling.
• Exposure to AI-assisted DevOps, Model Context Protocol (MCP), retrieval-augmented generation (RAG) or agentic automation.

What success looks like

• Azure infrastructure and governance are consistently delivered through code and controlled pipelines rather than manual portal changes.
• Production services have measurable reliability targets, useful telemetry, tested rollback/recovery paths and actionable alerts.
• Repetitive operational work is converted into secure, reusable .NET, Python or PowerShell automation.
• Application teams can consume standardized platform patterns with less dependency on manual DevOps intervention.
• Security, compliance and cost controls are built into the platform and delivery process instead of added after deployment.