SRE / SecOps Senior

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a SRE / SecOps Senior based in Brazil.

This is a senior-level opportunity for an experienced reliability and security engineer to help build, operate, and continuously improve highly available production environments.

You will work at the intersection of Site Reliability Engineering, DevOps, cloud infrastructure, and cybersecurity, with a strong focus on resilience and performance.

The role combines hands-on engineering with strategic thinking, enabling you to identify risks and implement improvements before they affect production.

You will contribute to infrastructure automation, Kubernetes and cloud architecture, vulnerability management, incident response, and secure CI/CD practices.

The position offers broad technical ownership across complex workloads, distributed applications, databases, networks, and storage environments.

You will collaborate closely with development, infrastructure, and security teams in an environment that values automation, reliability, continuous improvement, and proactive problem-solving.

This is an ideal role for someone who enjoys solving complex technical challenges and making production systems safer, faster, and more resilient.

Accountabilities:

• Drive the performance, stability, security, and reliability of production environments, proactively identifying infrastructure weaknesses and opportunities for improvement.
• Design, provision, and maintain infrastructure using Infrastructure as Code, leveraging tools such as Terraform, Pulumi, or CloudFormation and reusable, version-controlled modules.
• Manage and optimize Kubernetes and container orchestration environments, including EKS and other platforms, using Helm, Kustomize, Federation/Karmada, and policy enforcement practices.
• Build and evolve cloud environments across AWS and OVH, applying security services and controls such as IAM, GuardDuty, CloudTrail, Config, Security Hub, and Inspector.
• Lead vulnerability management activities, including vulnerability scanning, remediation, patch management, security hardening, and implementation of appropriate controls.
• Develop and maintain incident detection and response capabilities, including security playbooks, EDR tooling, incident response plans, war rooms, and post-mortems.
• Establish and improve SLOs, SLIs, and SLAs, creating effective monitoring and alerting strategies that support reliability and operational excellence.
• Build and maintain CI/CD pipelines using tools such as Bitbucket Pipelines and Jenkins, supporting deployments across EKS, Swarm, and virtual machines.
• Implement secure and progressive delivery practices, including Canary, Blue-Green deployments, Feature Flags, and security controls throughout the software delivery lifecycle.
• Manage configuration and secrets using technologies such as Ansible, Chef, Puppet, AWS Secrets Manager, and HashiCorp Vault.
• Design and secure network infrastructure involving VPCs, VPNs, Security Groups, firewalls, WAFs, Kubernetes RBAC, IAM, mTLS, OIDC, OAuth2, JWT, and SSO.
• Support relational and NoSQL databases and storage solutions, including MySQL, PostgreSQL, Aurora, MongoDB, and Redis, with attention to backups, replication, failover, and security.
• Develop automation using Bash, Python, Go, or Ruby, including REST APIs, webhooks, and JSON/YAML-based workflows.
• Participate in infrastructure migrations, performance and cost optimization initiatives, and modernization projects for complex, highly available environments.
• Investigate logs, metrics, and traces during incidents, identify root causes, reduce operational toil, and implement preventive improvements.
• Collaborate effectively with engineering, infrastructure, and security teams, documenting processes and contributing to a strong reliability and security culture.

Requirements:

• 6-8+ years of professional experience in SRE, SecOps, DevOps, or closely related engineering roles, preferably within complex, high-availability environments.
• Strong experience with AWS, Linux, Docker, Kubernetes and/or Docker Swarm, including production-grade container orchestration.
• Proven expertise in Infrastructure as Code, particularly Terraform, Pulumi, or CloudFormation, with experience developing reusable modules and applying version-control best practices.
• Hands-on knowledge of Kubernetes security and operations, including EKS, Helm, Kustomize, RBAC, policy enforcement, and cluster hardening.
• Strong understanding of cloud security, vulnerability management, patching, and security tooling such as AWS IAM, GuardDuty, CloudTrail, Config, Security Hub, Inspector, Nessus, Qualys, or OpenVAS.
• Experience with EDR and incident response, including tools such as CrowdStrike, Carbon Black, SentinelOne, or equivalent technologies.
• Solid CI/CD experience with Jenkins, Bitbucket Pipelines, Git, and secure deployment practices.
• Experience with databases and data infrastructure, including MySQL, MongoDB, Redis, and preferably PostgreSQL/Aurora.
• Knowledge of Apache Kafka, distributed applications, multithreading, and high-volume workloads.
• Strong scripting and automation capabilities using Bash, Python, Go, or Ruby, as well as REST APIs, webhooks, JSON, and YAML.
• Experience with networking and security technologies such as VPC, VPN, firewalls, WAF, Security Groups, IAM, mTLS, OAuth2, OIDC, JWT, and SSO.
• Strong understanding of SRE principles, including SLOs, SLIs, SLAs, incident management, post-mortems, Chaos Engineering, and toil reduction.
• Demonstrated experience analyzing application, infrastructure, and SQL performance, optimizing algorithms, and improving system efficiency.
• Track record of leading or contributing to infrastructure migrations, automation initiatives, architecture improvements, and cost/performance optimization.
• Experience with autoscaling of applications is a plus.
• Strong troubleshooting, analytical, and problem-solving skills, with the ability to anticipate issues and act proactively.
• Excellent collaboration and communication skills, particularly when working across development, security, and infrastructure teams.
• Technical English proficiency for reading and working with technical documentation.
• Ability to work effectively in a remote environment with autonomy, accountability, and strong documentation habits.

Benefits:

• Fully remote work model with flexibility to work from home.
• Meal and food allowance.
• Health insurance, with 50% paid by the company and 50% by the employee.
• Dental insurance, with 50% paid by the company and 50% by the employee.
• Home office allowance to support your remote working setup.
• Birthday month day off.
• Extended parental leave for maternity and paternity.
• TotalPass, providing access to fitness, sports, Pilates, martial arts, nutrition, and wellness services.
• Access to emotional and mental wellness platforms, including Psicologia Viva, ZenClub, and Vittude.
• Professional Development Program, subject to applicable company policies.
• An inclusive environment where qualified candidates are welcomed regardless of race, color, religion, age, gender, nationality, disability, or family status.