Senior Engineer - Platform Engineering

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed.

If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future.

São Paulo  Office - Hybrid: 4 days in the office, 1 day working from home

Ebury is a Global FinTech: we apply new technologies to enhance and automate financial services and processes. This allows small and medium-sized businesses to trade and transact internationally by eliminating boundaries related to more traditional.

Are you ready to be an Eburian?

As a digital international payments platform, we are constantly challenged to change levels of quality, security and usability. That's why we look for innovative and critical employees who care about the results and impact of our products on society. Our business is growing at an impressive speed and our team needs new employees to make a difference on this journey.

We are always connected to the latest in the world of technology and software engineering. We trust our platforms to a variety of cutting-edge technologies and engineering methods that help us innovate at all times. We value professionals who seek constant learning without restricting their knowledge to a single technology.

We are looking for a Senior Platform Engineer that is in line with the technological stack we use. If you don't have full adherence, don't worry, we like the diversity of knowledge and you can certainly learn a lot from our team.  

As part of the team, you will be responsible for helping to build an Engineering Platform aligned with the guidelines of our global team at Ebury.

How we work today:

• Product-oriented multidisciplinary teams.
• Multidisciplinary teams focused on products.
• Agile methodology.
• Scalable architecture oriented towards microservices.
• Microservices written in GoLang, Python, Kotlin, Node.js, and React.
• High processing capacity with intercommunication using GRPC/Kafka.
• Continuous integration and deployment in Google Cloud (GCP).
• Automation using GIT, Jenkins, Spinnaker, Ansible, and Terraform.
• Data persistence in DataStore.
• Monitoring based on "observability" techniques using Prometheus.
• Immutable infrastructure with containers managed via Kubernetes.

Responsibilities of the Senior Platform Engineering Role:

• Discuss and help define service owners created in GCP (Google Cloud) for the business through a RACI Matrix.
• Define and create centralized access management controls for resources created by teams in GCP (Google Cloud).
• Implement a robust integration and shutdown process with the integration of access request and approval workflows through automations in JIRA.
• Help define and deploy a standardized baseline for creating new projects to avoid the recurring proliferation of non-standard projects within the company.
• Develop standardized guidelines for creating new projects, covering naming conventions, resource allocations, and configurations.

On Security:

• Design and implement monitoring controls for access to keys and their related functions.
• Introduce a comprehensive RBAC system within GCP, ensuring that users and service accounts receive permissions strictly based on their roles and responsibilities following the Principle of Least Privilege (PoLP).
• Governance and creation of guardrails for platform self-service automation;
• Governance and creation of "Golden Paths" automation for engineering teams;
• Governance and creation of observability for resources created through the engineering platform.

Requirements and Qualifications:

• Advanced English. Spanish is a plus.
• Analytical, resilient, and multitasking profile.
• Management capability.
• Experience facilitating the adoption of IT standards and processes.
• Advanced knowledge of OS (Linux).
• Aptitude for scripting programming and IaC (Infrastructure as Code).
• Knowledge in Networking (TCP/IP, Firewall, DNS, Routing, etc.).
• Cloud Platform operation in GCP (e.g., Function, Cloud SQL, Buckets, GKE, Firestore, VPC, Cloud DNS, IAM, Instances) and/or AWS (e.g., S3, RDS, EC2, ECS, Lambda, EKS, DynamoDB, IAM, CloudFront, VPC, R53).
• Knowledge of CI/CD (Tools such as: GitHub, Github Actions, Jenkins, ArgoCD. Practices: Build, test, push, deploy stages).
• Orchestration of plugins and addons (K8S, EKS, GKE, Kops, Kubespray, Rancher, Helm, Nginx Ingress Controller or equivalent).
• Knowledge of Observability using tools such as: (Prometheus, Grafana, Jaeger, AlertManager, Kiali, ELK Stack, Loki, DataDog, Dynatrace, AppDynamics, CloudWatch, StackDriver, OpenTelemetry, New Relic. To generate and track: Metrics, Logging, Application Tracing).

About us

Ebury delivers sophisticated, integrated solutions - business accounts, hedging, and financing - on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally. 

Since its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 2000+ Eburians across nearly 70 cities and we’re always looking to add to our team. 

At the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage. 

The opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars.

We believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story.

Important Security Notice for Job Applicants:

Ebury only accepts applications via official Ebury channels. We will only contact you from an @ebury.com  domain. Always check the emails you receive from us, and note that we will never  request payment for any part of the recruitment process. Stay safe and report suspicious activity.

Notice to Recruitment Agencies and Search Firms:

Ebury does not accept unsolicited resumes, CVs, or candidate profiles from recruitment agencies or search firms without signed written Ebury recruitment terms in place for a specific role. Any unsolicited applications will be considered the sole property of Ebury. Ebury will not be responsible or liable for any placement fees or costs associated with unagreed candidate submissions or subsequent hires.

AI Transparency Statement:

Ebury uses Artificial Intelligence (AI) and automated tools to help streamline certain parts of our recruitment process, however, these tools are strictly for administrative efficiency. All hiring decisions, including application reviews, shortlisting, and final selections are evaluated and conducted by human talent acquisition professionals and hiring managers.