Senior DevOps Engineer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design and uphold scalable, secure, and observable CI/CD pipelines within GitLab.

• Execute a shift-left security approach by embedding scanning tools into developers’ workflows.

• Establish severity baselines and guide the progressive transition of scanners from report-only to blocking mode.

• Containerize applications utilizing optimized Dockerfiles, incorporating multi-stage builds and minimal/distroless images.

• Oversee the image lifecycle in Artifact Registry.

• Set up secure authentication between GitLab and GCP using OIDC / Workload Identity Federation.

• Enhance pipeline observability, encompassing execution time, failure rate, and runner costs.

• Improve performance and cost efficiency.

• Document and advocate for DevSecOps practices, acting as a technical reference for product teams.

• Foster a culture of reliability, including SLOs, blameless postmortems, and the reduction of toil.

⛳️ Requirements

• Practical experience in constructing CI/CD pipelines, preferably with GitLab CI/CD; experience with Bitbucket Pipelines, GitHub Actions, or Jenkins is applicable.

• In-depth understanding of Docker and image builds, including multi-stage builds, optimization, and container security.

• Experience with at least one cloud provider; GCP is highly advantageous, encompassing Artifact Registry, IAM, Service Accounts, and Workload Identity.

• Familiarity with DevSecOps practices and scanning tools, including SAST, SCA, and secret detection.

• Proficiency in Bash scripting and at least one programming language, such as Python or Go.

• Knowledge of Git version control and workflows based on Merge/Pull Requests.

• Nice to have: experience with GitLeaks, Semgrep, and/or Trivy.

• Nice to have: experience in configuring OIDC / Workload Identity Federation between CI and cloud environments.

• Nice to have: experience with infrastructure as code tools, such as Terraform or Pulumi.

• Nice to have: experience with Kubernetes / GKE and deployment strategies like Cloud Run, GKE, blue-green, and canary deployments.

• Nice to have: experience with integrating AI/LLM tools into engineering workflows.

• Nice to have: experience with image signing using cosign, SBOM generation, and supply chain security (SLSA).

• Nice to have: cloud certifications, such as GCP Professional Cloud DevOps Engineer or equivalent.

🏝️ Benefits

• Meal or food allowance.

• Discounts on courses, universities, and language institutions.

• Stefanini Academy — a platform providing free, current online courses with certificates.

• Mentoring opportunities.

• Discount program for medical consultations and examinations.

• Health insurance coverage.

• Dental insurance coverage.

• Benefits and discounts at leading establishments.

• Travel club membership.

• Pet care benefits.