Cloud Infrastructure Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop and sustain components of the multi-account AWS Landing Zone, which includes AWS Organizations, Control Tower, AFT, tagging standards, and permission boundaries.

• Facilitate governance, security measures, observability, and backup functionalities across AWS, Azure, and GCP.

• Manage cloud identity and access protocols, encompassing Okta federation, AWS IAM Identity Center, permission sets, group memberships, and credential management.

• Set up and oversee cloud networking elements, including IP address management, VPC configuration, routing, transit connectivity, and DNS.

• Assist in transitioning workloads from public-internet exposure to private/zero-trust networking frameworks.

• Develop and uphold self-service infrastructure workflows for account and environment provisioning, as well as access requests.

• Implement backup, restore, and disaster recovery procedures across cloud regions and accounts; ensure maintenance and testing of DR runbooks.

• Create and sustain Terraform/Terragrunt modules utilized by engineering teams.

• Ensure CI/CD automation is maintained for cloud infrastructure.

• Investigate and address cloud security issues.

• Assist FinOps initiatives by identifying cost optimization possibilities.

• Maintain documentation, runbooks, and operating procedures.

• Leverage AI coding agents in the engineering workflow, ensuring output validation and adherence to code review, testing, security, and production standards.

⛳️ Requirements

• Over 5 years of professional experience in Cloud Infrastructure, DevOps, Site Reliability Engineering, Platform Engineering, Systems Engineering, or a related field (or a comparable combination of education and experience).

• More than 3 years of hands-on experience with AWS or another major public cloud, with a strong preference for significant AWS experience.

• At least 1 year of experience with Infrastructure as Code, preferably using Terraform and/or Terragrunt.

• Practical experience in an AWS multi-account environment, including AWS Organizations, Control Tower, or a similar landing-zone framework.

• Exposure to at least one additional major cloud platform, such as Azure or GCP, beyond a single workload.

• Experience in developing or maintaining Infrastructure as Code modules for use by others.

• Hands-on proficiency with cloud identity and access management, including SSO, SAML federation, SCIM provisioning, IAM policies/roles, and permission boundaries.

• Strong foundation in cloud networking fundamentals, including IP address planning, VPC/VNet configuration, routing, DNS, and network security.

• Experience in maintaining CI/CD pipelines, such as GitHub Actions or Jenkins.

• Scripting or programming skills in Python, Go, Bash, or a similar language.

• Solid Linux fundamentals.

• Working knowledge of Kubernetes and cloud-native infrastructure.

• Experience with AI coding agents or AI-assisted development tools, including validating generated code and identifying operational or security risks.

• Ability to work autonomously on clearly defined infrastructure tasks and exercise judgment within established guidelines.

• Excellent written and verbal communication skills; capable of collaborating across Engineering, Security, and FinOps teams.

• Advanced English proficiency.

• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related technical field, along with 5 years of experience; or an equivalent combination of education and experience.

• Must reside in Brazil.

• Preferred qualifications encompass AWS Control Tower, AFT, AWS IPAM, Transit Gateway, Cloud WAN, multi-cloud environments, MongoDB Atlas, Elastic Cloud, Wiz, GuardDuty, CrowdStrike, Zscaler ZPA, Cloudflare WAF/DNS, fundamentals of certificate and PKI lifecycle, agentic automation pipelines, FinOps basics, and relevant AWS/Azure/GCP/Terraform/Kubernetes certifications.

🏝️ Benefits

• No specific benefits, perks, or compensation extras mentioned.