Master Data Developer – Data Ops

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Take full ownership of end-to-end environment provisioning and platform readiness across the data stack, from SQL Server CDC source to Snowflake landing, raw, and curated layers.

• Provision and oversee Snowflake DEV, QA, UAT, and Production environments, ensuring appropriate warehouse sizing, auto-suspend features, resource monitoring, and cost attribution.

• Coordinate the provisioning of Azure infrastructure, including Virtual Networks, NSGs, Private Endpoints, Azure Key Vault, self-hosted Azure DevOps agents, VM infrastructure, firewall rules, TLS certificates, and DNS resolution.

• Manage Snowflake RBAC provisioning and conduct access tests prior to handover.

• Oversee the lifecycle of vendor and service account access, including credential storage, rotation, and documented revocation processes.

• Develop and manage Azure DevOps YAML CI/CD pipelines for data artifacts and enforce DEV-to-Production promotion controls.

• Integrate automated regression testing, schema validation, row-count checks, data quality assurance, code and dependency scanning, and IaC validation into CI pipelines.

• Design, document, and rehearse rollback procedures, including mock cutover and rollback drills.

• Implement comprehensive monitoring using Azure Monitor and Log Analytics to track replication health, CDC lag, warehouse freshness, schema drift, and semantic definition changes.

• Configure alert systems and escalation paths linked to the client’s ITSM tool.

• Maintain Azure diagnostic settings, centralized Log Analytics, retention policies, access control, and audit trails.

• Implement Snowflake resource monitors and Azure Cost Management budget alerts, generating FinOps attribution reports.

• Own the platform's cost attribution, monitor consumption, manage resource tagging, conduct cost modeling, set budgets, and perform right-sizing reviews.

• Manage Azure and Snowflake infrastructure as code using Terraform or Bicep, including remote state management and policy guardrails.

• Maintain architecture decision records, network and connectivity designs, environment topology, CI/CD promotion models, and security access documentation.

• Write and validate operational runbooks for various scenarios including failures, recovery, CDC lag, deployment, rollback, reconciliation, access issues, cost anomalies, and incident response.

• Facilitate progressive knowledge transfer through collaborative working sessions, shadowed deployments, and runbook exercises.

• Serve as the primary client-facing contact for platform operations across delivery, DataOps, Cloud Architecture, Infrastructure/Network, and Information Security teams.

• Track infrastructure dependencies, deadlines, and schedule impacts while proactively escalating readiness risks.

⛳️ Requirements

• Strong hands-on experience in DataOps or platform engineering roles supporting a production cloud data platform end-to-end, including provisioning, CI/CD, monitoring, and operational handoff.

• Extensive CI/CD experience for data pipelines utilizing Azure DevOps Pipelines (YAML), Git-based workflows with branch policies and approval gates, automated testing and regression checks, and multi-environment promotion paths.

• Proficient in Azure infrastructure, including Virtual Networks, NSGs, Private Link and Private Endpoints, Azure Key Vault, Microsoft Entra ID, Azure Monitor and Log Analytics, and Azure Cost Management.

• Hands-on experience with Terraform that includes remote state management on Azure Blob Storage, the Snowflake Terraform provider, and IaC security scanning integrated within CI pipelines.

• Experience working with the Snowflake platform, focusing on RBAC design, warehouse sizing and segregation, resource monitors, row-access policies, and dynamic data masking.

• Proven experience monitoring and alerting on a CDC-based replication pipeline in a production environment, including lag monitoring, restart and recovery protocols, and schema-drift detection.

• Experience managing pipeline credentials through Azure Key Vault, ensuring no plaintext credentials are stored in repositories or pipeline definitions, along with documented rotation procedures.

• Familiarity with integrating code scanning, dependency scanning, and IaC scanning into CI pipelines.

• Understanding of least-privilege access design and audit logging requirements in regulated or sensitive-data environments.

• Experience managing FinOps attribution, budget alerts, and conducting right-sizing reviews.

• Proficient in English (B2+ level).

• Experience with Snowflake Enterprise or Business Critical editions is preferred.

• Additional experience with Qlik Replicate, Azure SQL Server/SQL Server on Azure VM, Microsoft Fabric/OneLake, Azure ExpressRoute and hybrid networking, Microsoft Entra ID PIM, Microsoft Dynamics 365 Business Central, Power BI semantic model operations, production runbook authorship, facilitating knowledge transfer, mortgage/lending/financial-services environments, and dbt or dbt-style versioned SQL transformation frameworks is a plus.

🏝️ Benefits

• Health and dental insurance.

• Meal and food allowance.

• Childcare assistance.

• Extended paternity leave.

• Partnership with gyms and health and wellness professionals through Wellhub (Gympass) TotalPass.

• Profit Sharing and Results Participation (PLR).

• Life insurance.

• Access to a continuous learning platform (CI&T University).

• Membership in a discount club.

• Free online platform dedicated to physical, mental, and overall well-being.

• Courses on pregnancy and responsible parenting.

• Partnerships with online learning platforms.

• Language learning platform access.

• Inclusion support and workplace accommodations for individuals with disabilities.

• Dedicated Health and Well-being team, inclusion specialists, and affinity groups.