20 days ago
Brazil (city not specified)Mid Level
Responsibilities
- Design and deliver cloud infrastructure changes that improve security through network isolation, identity-based access, infrastructure as code, and secure infrastructure defaults.
- Plan infrastructure rollouts that avoid customer downtime and coordinate application updates with service owners.
- Run vulnerability management activities, drive remediation within defined SLAs, and improve security-finding automation.
- Extend security scanning with automated security code review and AI-driven penetration testing.
- Manage third-party penetration tests, including scoping, test environments, vendor coordination, findings intake, and retesting.
- Deploy and operate internal security, IT, and AI applications in Azure with appropriate identity, secrets, networking, and backups.
- Build OpenTelemetry telemetry pipelines into Azure Monitor, along with dashboards and alerts for anomalous activity.
- Partner with DevOps, engineering, and IT & Security teams; maintain runbooks, documentation, and SOC 2 evidence.
Requirements
- At least 3 years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering.
- Hands-on experience with Azure, AWS, or GCP, including networking, identity and access management, and secrets management.
- Production experience with infrastructure as code, preferably Terraform, and experience building and maintaining CI/CD pipelines.
- Working knowledge of containers and Kubernetes.
- Scripting experience with Python, PowerShell, or Bash.
- Understanding of common cloud and web application security risks and how to remediate them.
- Ability to explain technical risk clearly to technical and non-technical audiences, with fluent written and spoken English.
- Preferred qualifications include Azure experience with private endpoints, VNet integration, and Entra ID managed identities; application security testing with SCA, SAST, or DAST; penetration-test coordination; OpenTelemetry or Azure Monitor; KQL alert queries; SOC 2, ISO 27001, or CIS Benchmarks; AI tooling deployment and monitoring; and certifications such as AZ-500 or Security+.
Tech Stack
AngularAWSAzureBashC#CloudflareDockerGitHub ActionsGoogle Cloud PlatformGrafanaKubernetes.NETPowerShellPythonReactTerraformTypeScript
About Alvys
Alvys builds a cloud-based transportation management system used by trucking carriers and freight brokers to run dispatch, accounting, EDI, and driver workflows. The company sells its multi-tenant SaaS platform by subscription and integrates with load boards, telematics, and accounting tools. Privately held and headquartered in Solana Beach, California, Alvys reports adoption by over 1,000 fleets in the U.S.