Want to know if this job is worth applying to?
São Paulo, São Paulo, Brasil
Onsite
Avra is a frontier AI lab building relational foundation models from the ground up (no third-party wrappers).
We model how businesses and individuals are connected and interact over time. Put simply: we bring connections into the math.
Leading enterprises in LatAm use Avra's models to power key decisions in credit, growth, and fraud. Our customers include the largest banks and marketplaces in Latin America, such as Mercado Libre, Telefonica, Banco Inter and Getnet.
Avra was founded in 2024 by Viviane Meister and Bruno Alano (ex-OpenAI). Our investors include NXTP, Clocktower Ventures, as well as the Sequoia and a16z scouts. We are accelerated by NVIDIA, AWS, and Google.
We are a team of builders. Join us.
At Avra, every technical IC is a Member of Technical Staff (MTS). The title doesn't put anyone in a silo: you own systems and outcomes, not steps in a function, and you keep building depth in your area.
In this role, you'll join the Platform team to own what ships and operates our services in any environment. Banks and large enterprises want their sensitive data to stay in-house, so we run part of our platform on their Kubernetes. On-premise deployment is strategic for Avra. You'll build the channel that installs, upgrades, observes, and operates those dataplanes as if they were our own, along with the infrastructure and continuous delivery foundations every team relies on.
Evolve the dataplane deployment channel: portal, OCI registry, deploy agent, Application Agent, and the Control Plane API.
Install, upgrade, and roll back services on customer Kubernetes via Helm, with Application Agent operating over outbound polling and no inbound ports open on the dataplane.
Own Kubernetes and cloud foundations on GCP and AWS: Terraform, networking, IAM, and secrets.
Maintain the packages and distribution registries for everything that ships on-premise.
Coordinate incident response across dataplanes, including when the fix depends on an action by the customer.
Define guardrails and standards for the services other teams run in dataplanes, in partnership with Security.
Time from a published release to it running in a dataplane, in our cloud or at a customer.
Rollout and rollback time between authorized versions.
Drift between the desired and actual state of each dataplane.
Health and connectivity of agents across all dataplanes.
MTTR for incidents, including on-premise.
7+ years of relevant engineering experience at tech and product-driven companies
Deep, hands-on experience with Kubernetes in production: operating clusters, debugging workloads, networking, RBAC, and upgrades.
Infrastructure as code with Terraform on a public cloud (GCP and/or AWS).
Experience building CI/CD pipelines and continuous delivery, with reliable rollback.
Experience with Helm and packaging software for Kubernetes.
Production code, ideally in Go, for agents, controllers, and platform tooling.
A security mindset: least-privilege IAM, secrets management, and isolation between environments.
Incident response experience, and a willingness to operate what you build.
Daily use of coding agents, with an opinion on how to use them safely.
Shipping software to customer-hosted Kubernetes (on-premise, BYOC, or air-gapped) with Distr, Replicated, or similar.
GitOps (Argo CD, Flux) and ephemeral preview environments.
Software supply chain: artifact signing, SBOMs, and verification at install time.
Observability with OpenTelemetry
GKE and EKS.
Financial services or regulated environments (ISO 27001).
