Cloud Infrastructure Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cloud Infrastructure Engineer based in Brazil.

This is a hands-on cloud infrastructure role focused on building secure, reliable, and scalable foundations for engineering teams.

You’ll join a CloudOps environment responsible for identity, networking, governance, security, backup, disaster recovery, and shared cloud services.

The role offers broad exposure to AWS at organizational scale, while extending infrastructure practices across Azure and GCP.

You’ll use Infrastructure as Code, automation, and self-service capabilities to help teams move faster without compromising security or reliability.

Your work will contribute directly to stronger cloud governance, operational efficiency, resilience, and developer productivity.

You’ll collaborate closely with Engineering, Security, FinOps, and other technical teams on complex infrastructure initiatives.

AI-assisted engineering is also part of the workflow, enabling you to modernize automation and implementation while maintaining rigorous technical standards.

Accountabilities

• Build, maintain, and evolve a multi-account AWS landing zone using AWS Organizations, Control Tower, Account Factory for Terraform, Service Control Policies, tagging standards, and permission boundaries.
• Extend cloud governance, security controls, operational standards, observability, and backup capabilities across AWS, Azure, and GCP.
• Improve identity and access management through SSO, federation, IAM Identity Center, permission sets, group design, credential management, and least-privilege principles.
• Design and operate cloud networking, including IP address management, VPC architecture, routing, transit connectivity, Cloud WAN, egress architecture, and public/private DNS.
• Support the transition of workloads from public internet exposure to private and zero-trust networking models, including Kubernetes control planes, databases, and internal platforms.
• Build self-service infrastructure capabilities covering account provisioning, environment provisioning, access requests, account lifecycle management, and infrastructure inventory.
• Design and maintain backup, restoration, and disaster recovery capabilities across regions, accounts, and business units with different recovery requirements.
• Implement immutable and ransomware-resistant backup strategies for cloud-native and managed third-party data platforms.
• Develop reusable Terraform and Terragrunt modules and infrastructure patterns that can be safely consumed by engineering teams.
• Create and maintain CI/CD automation for cloud infrastructure.
• Partner with Security teams to investigate and remediate cloud security findings and with FinOps teams to identify scalable cost-optimization opportunities.
• Maintain cloud documentation, standards, operating procedures, and shared responsibility models.
• Use AI coding agents to accelerate implementation and automation while retaining ownership of requirements, architecture, testing, security, code review, and production outcomes.
• Develop reusable AI-assisted workflows, prompts, context, and agent capabilities to improve CloudOps productivity.
• Independently own infrastructure projects from design through production and contribute technical guidance and mentorship to other engineers.

Requirements

• 5+ years of professional experience in Cloud Infrastructure, DevOps, Site Reliability Engineering, Platform Engineering, Systems Engineering, or a related infrastructure discipline.
• 3+ years of hands-on experience with AWS or another major public cloud, with significant AWS experience strongly preferred.
• At least 1 year of Infrastructure as Code experience, ideally using Terraform and/or Terragrunt.
• Experience operating AWS at organizational scale, including AWS Organizations, multi-account architectures, and Control Tower or a comparable landing-zone architecture.
• Production experience with at least one additional major cloud platform, such as Azure or GCP.
• Strong experience creating reusable Infrastructure as Code modules and patterns for use by other engineering teams.
• Hands-on knowledge of cloud identity and access management, including SSO, SAML federation, SCIM provisioning, IAM policies, roles, permission boundaries, and least-privilege models.
• Strong cloud networking fundamentals, including IP address planning, VPC/VNet design, routing, transit architectures, DNS, private connectivity, and network security.
• Experience designing or maintaining CI/CD pipelines using GitHub Actions, Jenkins, or similar tools.
• Scripting or programming experience with Python, Go, Bash, or comparable languages, together with strong Linux fundamentals.
• Working knowledge of Kubernetes and cloud-native infrastructure.
• Experience with AI coding agents or AI-assisted development tools such as Claude Code, Cursor, Codex, or similar, with the ability to validate generated code and identify security or operational risks.
• Ability to independently manage complex infrastructure initiatives, make sound technical decisions, identify risks, and build reusable solutions.
• Strong written and verbal communication skills and the ability to collaborate effectively with Engineering, Security, FinOps, and other technical stakeholders.
• Advanced English proficiency.
• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or a related technical field.
• Must reside in Brazil.
• Preferred experience includes AWS Control Tower/AFT, AWS IPAM, Transit Gateway, Cloud WAN, multi-cloud governance, immutable backups, cloud security platforms, zero-trust networking, Cloudflare, PKI, agentic automation, MCP, FinOps, SOC 2, GitHub organization administration, and relevant cloud or infrastructure certifications.

Benefits

• Hands-on role with broad ownership across cloud infrastructure and platform capabilities.
• Opportunity to work with AWS at organizational scale and expand expertise across Azure and GCP.
• Exposure to complex challenges spanning cloud governance, networking, security, disaster recovery, automation, and self-service infrastructure.
• Opportunity to work with modern AI-assisted engineering and agentic automation practices.
• Collaborative environment with close interaction across Engineering, Security, FinOps, and other technical teams.
• Strong opportunities for technical growth, mentorship, and increasing ownership.
• Culture centered on innovation, collaboration, empathy, resilience, transparency, and technical excellence.
• Remote opportunity for candidates based in Brazil.