Analista de Sistemas Jr (DevSecOps)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Analista de Sistemas Jr (DevSecOps) based in Brazil.

Join a technology-driven environment focused on strengthening cloud infrastructure, platform engineering, and secure software delivery practices.
In this role, you will contribute to the development and maintenance of automated CI/CD pipelines, reusable infrastructure components, and deployment workflows.
You will work with modern cloud technologies, containers, Kubernetes, and Infrastructure as Code to improve the reliability and efficiency of development processes.
By integrating security controls throughout the software development lifecycle, you will help teams deliver applications more safely and consistently.
You will collaborate with development, security, and infrastructure teams to troubleshoot technical challenges and improve operational workflows.
This is an opportunity to deepen your DevSecOps expertise, contribute to scalable engineering standards, and grow in a collaborative, fully remote environment.

Accountabilities

Develop, maintain, and improve reusable CI/CD pipelines and templates, automating build, testing, code quality analysis, security scanning, publishing, and application delivery processes.
Support the implementation and continuous improvement of DevSecOps practices, embedding security controls into development workflows and software delivery pipelines.
Create and maintain reusable Infrastructure as Code modules and automation scripts, supporting the provisioning and management of cloud resources, particularly within AWS environments.
Work with Docker containers and Kubernetes, helping standardize container images, deployment manifests, templates, and configuration practices.
Support GitOps workflows and their integration with CI/CD pipelines and Argo CD, contributing to consistent and reliable application deployments.
Implement and maintain secure container image management practices, including image publishing, promotion, vulnerability scanning, signing, verification, and Kubernetes admission controls.
Contribute to security initiatives involving vulnerability management, secrets management, secure authentication, software supply chain protection, AWS, and Cloudflare.
Develop scripts and tools to automate repetitive operational tasks, reduce manual intervention, and improve the efficiency and consistency of platform services.
Investigate and troubleshoot failures involving pipelines, containers, applications, and infrastructure components, helping identify root causes and implement corrective actions.
Support development teams in adopting platform engineering standards, reusable templates, and automation solutions.
Prepare and maintain technical documentation, implementation guides, examples, runbooks, and engineering standards.
Participate in proofs of concept, technical evaluations, and continuous improvement initiatives while sharing knowledge with development, security, infrastructure, and operations teams.
Requirements
Education: Completed bachelor's degree in Systems Analysis and Development, Information Systems, Computer Science, or a related field.
Professional experience: Demonstrable professional or practical experience in DevOps, DevSecOps, Platform Engineering, Cloud Computing, or a related area, with familiarity across several of the following technical domains.
CI/CD and automation: Understanding of pipeline automation, with experience using GitHub Actions and/or GitLab CI/CD.
Containers and orchestration: Knowledge of Docker and container image creation and maintenance, along with foundational understanding of Kubernetes.
Infrastructure and cloud: Familiarity with Infrastructure as Code, particularly Terraform, and cloud computing fundamentals, preferably AWS.
Security practices: Understanding of DevSecOps principles and security integration throughout the development lifecycle, including basic knowledge of SAST, SCA, vulnerability scanning, and container image security.
Version control and scripting: Proficiency in Git fundamentals, including branches, pull requests, and code reviews, as well as the ability to read, troubleshoot, and maintain pipelines and scripts.
Documentation and collaboration: Ability to document technical solutions clearly, follow engineering standards, and collaborate effectively with multidisciplinary teams.
The following qualifications are considered a plus:
Practical experience with AWS services such as EKS, ECR, IAM, KMS, and S3.
Experience with Kubernetes, Helm, Kustomize, and Argo CD.
Knowledge of Terraform, Terragrunt, GitOps practices, and reusable GitHub Actions workflows.
Familiarity with security tools such as Trivy, Gitleaks, and Semgrep.
Knowledge of secrets management, OIDC-based pipeline authentication, software bills of materials (SBOM), provenance, and image signing with Cosign.
Experience with Kubernetes security policies and controls, including Kyverno, and container image promotion by digest.
Familiarity with Cloudflare infrastructure automation.
Programming or automation experience using Go and/or Python.
Knowledge of Maven, Gradle, and Java/JHipster applications.
Understanding of observability, troubleshooting in distributed environments, and technical architecture documentation.
Relevant certifications in AWS or cloud computing, Kubernetes or cloud-native technologies, Terraform or Infrastructure as Code, DevOps, DevSecOps, cloud security, or application security. Certifications are desirable but not mandatory.
Benefits
Salary: R$ 4,873.65.
Work model: Fully remote, with occasional office visits and business travel when required.
Health insurance: National coverage with private-room accommodation, with no employee contribution.
Dental insurance: Dental coverage at no cost to the employee.
Food allowance: Meal or grocery allowance.
Wellhub: Access to fitness and wellness services.
Home office allowance: Financial support for remote work expenses.
Parental leave: Extended maternity and paternity leave through the Empresa Cidadã program.
Childcare assistance: Reimbursement of up to 70% of the current minimum wage for eligible children up to 5 years and 11 months old.
Vaccination assistance: Reimbursement for eligible vaccines not provided by public health services, including support for dependents.
Mental health and well-being: Access to Conexa Saúde and Zenklub, with digital psychological, financial, and legal guidance.
Birthday day off: An additional day off to celebrate your birthday.
Digital learning resources: Access to a digital library with more than 30,000 newspapers, magazines, and e-books.
Life insurance: Coverage provided as part of the benefits package.
SESC partnership: Access to eligible cultural, recreational, and other partner services.