Brasil
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior SecOps Engineer based remotely in Brazil.
We are seeking an experienced Senior SecOps professional to strengthen the security, reliability, and performance of complex production environments. In this role, you will work at the intersection of security operations, cloud infrastructure, DevOps, and site reliability engineering. You will help design and improve cloud environments, automate infrastructure management, and implement robust security controls across distributed systems. Working closely with infrastructure, development, and security teams, you will identify vulnerabilities, anticipate operational risks, and drive continuous improvements. You will also contribute to incident response, deployment automation, and reliability practices that keep critical services stable and secure. This is an opportunity to take technical ownership, influence infrastructure strategy, and support the evolution of scalable technology platforms.
You will help maintain and evolve secure, high-performing production infrastructure while driving improvements in automation, reliability, and operational security. Your responsibilities will include:
Collaborate with infrastructure teams to recommend new technologies, improve existing platforms, and strengthen operational practices.
Monitor and optimize the performance, availability, stability, and security of production environments.
Participate in designing and provisioning new infrastructure environments to support emerging products and services.
Assess existing platforms and architectures to identify vulnerabilities, reliability gaps, and opportunities for improvement.
Design, implement, and maintain Infrastructure as Code solutions using Terraform, Pulumi, or CloudFormation.
Manage and secure Kubernetes and container orchestration environments, including EKS and OVH, using Helm, Kustomize, and related tools.
Implement cloud security controls and monitoring using AWS services such as IAM, GuardDuty, CloudTrail, Config, Security Hub, and Inspector.
Conduct vulnerability assessments, coordinate remediation activities, manage patches, and strengthen security configurations.
Develop and maintain incident detection and response processes, including security playbooks and response plans.
Secure CI/CD pipelines and automate deployment processes across Kubernetes, Docker Swarm, and virtual machine environments.
Apply progressive delivery practices such as Canary releases, Blue-Green deployments, and Feature Flags.
Manage configuration automation and secrets through tools such as Ansible, Chef, Puppet, AWS Secrets Manager, and HashiCorp Vault.
Strengthen network and access security through VPCs, VPNs, firewalls, WAF, Security Groups, RBAC, and IAM controls.
Implement and maintain secure database and storage environments, including backup, replication, and failover processes.
Create and improve monitoring, alerting, and service-level objectives to identify operational issues before they affect production.
Investigate incidents using logs, metrics, and traces, participate in post-mortems, and implement preventive improvements.
Lead or contribute to infrastructure migrations, automation initiatives, architectural improvements, and performance optimization projects.
Reduce repetitive manual work through scripting and automation, supporting a strong Site Reliability Engineering culture.
The ideal candidate has extensive experience in SecOps, DevOps, or Site Reliability Engineering, with strong expertise in cloud infrastructure, automation, and security operations. You should be comfortable working with complex, highly available systems and taking ownership of technical challenges. The following qualifications and skills are expected:
6–8 years of experience in SRE, SecOps, DevOps, or a closely related infrastructure engineering role.
Experience managing complex environments, high-availability systems, and large-scale workloads.
Proven experience leading or contributing to infrastructure migrations, cost and performance optimization, automation projects, and production architecture improvements.
Strong Infrastructure as Code experience using Terraform, Pulumi, or CloudFormation, including reusable modules and version control practices.
Advanced knowledge of Kubernetes, including EKS and OVH, container orchestration, Helm Charts, Kustomize, Kubernetes Federation or Karmada, and policy enforcement with OPA/Gatekeeper.
Strong AWS and OVH cloud experience, including cloud security services and infrastructure controls.
Experience with vulnerability management tools such as Nessus, Qualys, or OpenVAS, as well as patch management and security remediation.
Knowledge of endpoint detection and response tools such as CrowdStrike, Carbon Black, SentinelOne, or Shodan, and experience developing incident response playbooks.
Hands-on experience with CI/CD tools such as Bitbucket Pipelines and Jenkins, as well as Git and automated deployments.
Knowledge of configuration management tools such as Ansible, Chef, or Puppet, and secrets management solutions such as AWS Secrets Manager or HashiCorp Vault.
Strong understanding of network security, including VPCs, VPNs, firewalls, WAF, Security Groups, mTLS, OIDC, OAuth2, JWT, and SSO.
Experience securing relational and NoSQL databases, including MySQL, PostgreSQL, Aurora, MongoDB, and Redis.
Proficiency in Linux, Docker, Docker Swarm, and/or Kubernetes.
Experience with Apache Kafka, distributed applications, multithreading, and database technologies.
Strong skills in Bash, Python, Go, or Ruby, with experience using REST APIs, webhooks, JSON, and YAML for automation.
Understanding of SRE principles, including SLOs, SLIs, SLAs, incident management, post-mortems, and toil reduction.
Familiarity with Chaos Engineering tools such as Gremlin or LitmusChaos.
Strong troubleshooting and analytical skills, with the ability to investigate logs, metrics, traces, application performance, algorithms, and SQL queries.
Strategic and proactive mindset, with the ability to anticipate infrastructure risks and implement preventive solutions.
Strong communication and collaboration skills when working with development, infrastructure, and security teams.
Ability to document technical processes and communicate complex issues clearly.
Technical English proficiency for reading and understanding documentation.
Nice to have:
Experience implementing application auto-scaling solutions.
Fully remote working arrangement.
Meal and food allowance.
Health insurance, with 50% of the cost covered by the employer and 50% by the employee.
Dental coverage, with 50% of the cost covered by the employer and 50% by the employee.
Home office allowance.
Birthday month day off.
Extended parental leave, including maternity and paternity leave.
Access to TotalPass, a well-being platform offering fitness, sports, Pilates, martial arts, and nutrition services.
Access to emotional well-being platforms, including Psychology Viva, ZenClub, and Vittude.
Professional development and training program, subject to company policy.
Inclusive working environment welcoming qualified candidates from diverse backgrounds, including people with disabilities.
