9 hours ago
Remote, BrazilSenior
Responsibilities
- Rearchitect and migrate AWS and Azure infrastructure to OpenTofu/Terraform and Ansible, including reusable modules, remote state, GitOps pipelines, and cloud governance.
- Implement policy-as-code, security guardrails, tagging and compliance controls, FinOps standards, cost allocation, rightsizing, and reserved-capacity planning.
- Design and operate observability across metrics, logs, traces, dashboards, SLI/SLO definitions, error budgets, alerting, incident response, chaos engineering, and capacity planning.
- Establish the SRE practice and partner with engineering teams to instrument services, define alerts, and build operational dashboards.
- Build and operate an Internal Developer Platform and developer portal with service catalogs, scaffolding templates, runbooks, API documentation, and self-service provisioning.
- Create golden paths for service creation, Kubernetes deployment, database provisioning, secrets management, and CI/CD setup.
- Own CI/CD platform capabilities, reusable workflows, container build and scanning pipelines, environment promotion, and GitOps delivery.
- Operate EKS and/or AKS clusters and define standards for Helm, admission controllers, RBAC, network policies, autoscaling, and service mesh.
- Support workload migrations, embed security through IaC scanning and secrets management, produce technical documentation and ADRs, mentor junior engineers, and contribute to architecture reviews.
Requirements
- 5+ years of platform, infrastructure, or DevOps engineering experience with direct production ownership on AWS and/or Azure.
- Deep OpenTofu/Terraform experience covering module authoring, state management, workspace strategy, remote backends, and CI/CD integration; Terramate is a plus.
- Strong Kubernetes operations experience with EKS and/or AKS, Helm, admission controllers, RBAC, network policies, and autoscaling.
- Hands-on observability experience with at least two of Prometheus, Grafana, Loki, Tempo, Datadog, or OpenTelemetry, including SLI/SLO definition and alert engineering.
- CI/CD platform experience with GitHub Actions, reusable workflow design, and container build and scan pipeline ownership.
- GitOps experience with ArgoCD or Flux; progressive delivery using canary or blue-green patterns is a strong plus.
- Internal Developer Platform experience with Backstage or an equivalent developer portal, GitHub, scaffolding templates, service catalogs, or self-service provisioning.
- Experience with policy-as-code, IaC scanning, secrets management, container hardening, and shift-left security practices.
- Strong communication and documentation skills, including presenting architecture decisions to engineering peers and leadership.
- Desirable qualifications include SRE and chaos engineering experience, service mesh expertise, FinOps tooling knowledge, AI/ML infrastructure familiarity, relevant cloud/Kubernetes/Terraform certifications, and Python or Go experience for platform tooling.
Benefits
- 100% remote work from Brazil.
- Company-paid medical insurance, mental health programs, and five undocumented sick-leave days per year.
- Internal meetups, conferences, workshops, Udemy access, language courses, and company-paid certifications.
- Long-term employment with 20 working days of paid vacation and local bank holidays.
- Internal Mobility Program and opportunities to change projects for professional growth.
- Global projects with international and fast-growing clients, plus team-building events and a collaborative work environment.
Tech Stack
Categories
DevOpsSite Reliability
About Ciklum
Ciklum is an IT services firm that builds custom digital products and provides nearshore engineering teams, QA, DevOps, data analytics, and UX for enterprises and high-growth startups. It operates a services model spanning product engineering, e-commerce solutions, and managed delivery centers. Founded in 2002 and headquartered in London, the privately held company serves global clients including Just Eat and Zurich Insurance.