Cloud Architect

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Participate in the vulnerability remediation initiative for one of CI&T's clients.

• Progress prioritized findings from the security backlog through research, implementation, deployment, validation, and documentation of closure evidence.

• Address PHP vulnerabilities related to injection, authentication, deserialization, and credential exposure.

• Refactor insecure patterns and eliminate hardcoded secrets.

• Conduct dependency and package upgrades utilizing Composer, addressing breaking changes and transitive conflicts.

• Implement AWS-side remediation, which includes configuration hardening, IAM modifications, and secret rotation.

• Transition credentials to a managed secrets store in collaboration with the Remediation Lead.

• Verify fixes through automated testing and ensure that identified issues no longer occur.

• Recognize recurring patterns that necessitate systemic solutions and contribute these insights to the team playbook.

• Collaborate closely with the client's engineering team, adhering to branching, code review, CI/CD, and definition-of-done practices.

• Assist client engineers in the adoption of secure coding methodologies.

⛳️ Requirements

• Professional experience in PHP development, including work with legacy or inherited codebases.

• Recent, hands-on involvement in PHP projects.

• Direct experience with security remediation, specifically fixing OWASP Top 10 class vulnerabilities at the code level.

• Exceptional English communication skills for effective daily written and verbal collaboration with a US-based engineering team.

• Senior or higher level of expertise.

• Experience in writing automated tests using PHPUnit or a comparable framework.

• Bachelor's degree in Computer Science, Information Technology, or a related field.

• Nice to have: Proficiency in Git, code review practices, and CI/CD pipelines.

• Nice to have: Experience with security scanners at scale, such as Snyk, Veracode, Dependabot, or Checkmarx.

• Nice to have: Experience in reducing a security or technical debt backlog in alignment with throughput targets.

• Nice to have: Familiarity with modern PHP frameworks like Laravel and Symfony, as well as legacy pre-framework PHP.

• Nice to have: AWS experience with PHP applications, including EC2, ECS, Elastic Beanstalk, Lambda, IAM, S3, RDS, CloudWatch, Secrets Manager, or Parameter Store.

• Nice to have: Infrastructure as Code experience with Terraform or CloudFormation.

• Nice to have: Containerization experience with Docker and ECS or EKS.

• Nice to have: Experience in integrating with legacy systems.

🏝️ Benefits

• Health and dental insurance.

• Meal and food allowance.

• Childcare assistance.

• Extended paternity leave.

• Partnerships with gyms and health and wellness professionals through Wellhub (Gympass) TotalPass.

• Profit Sharing and Results Participation (PLR).

• Life insurance.

• Continuous learning platform (CI&T University).

• Discount club.

• Free online platform focused on physical, mental, and overall well-being.

• Course on pregnancy and responsible parenting.

• Collaborations with online learning platforms.

• Language learning platform.

• Health and Well-being team, inclusion specialists, and affinity groups.

• Support and accommodations for individuals with disabilities throughout the selection process.