Senior DevSecOps - GCP

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design and oversee the company's infrastructure on Google Cloud Platform (GCP)

• Manage environments utilizing GKE, Cloud Run, and various managed services

• Create and enhance reusable Terraform modules

• Establish standards for networking, IAM, Service Accounts, and secrets management

• Implement least-privilege principles and maintain environment segregation

• Develop secure deployment processes that bridge the pipeline and runtime

• Execute infrastructure and service observability through metrics, logs, and tracing

• Assist teams in defining SLIs, SLOs, alerts, and planning for capacity

• Automate provisioning, configuration, and routine operational activities

• Investigate incidents and resolve recurring root causes

• Enforce security measures for images, workloads, and cloud configurations

• Monitor platform expenditures, capacity, availability, and operational risks

• Document standards and guide teams on secure infrastructure usage

⛳️ Requirements

• Practical experience with Google Cloud Platform

• Familiarity with GKE and Kubernetes

• Proficiency in Terraform and infrastructure as code

• Understanding of IAM, Service Accounts, Workload Identity, and Secret Manager

• Experience with networking on GCP, including VPCs, firewalls, DNS, and load balancing

• Knowledge of Docker and managing containerized applications

• Experience with observability, monitoring, and incident management

• Understanding of high availability, scalability, backups, and disaster recovery principles

• Experience in automation using Bash, Python, or Go

• Familiarity with DevSecOps practices in infrastructure and runtime settings

• Preferred: experience with Cloud SQL, Pub/Sub, Memorystore, and Artifact Registry

• Preferred: exposure to Datadog and OpenTelemetry

• Preferred: knowledge of Policy as Code, such as OPA or Gatekeeper

• Preferred: experience in securing Kubernetes clusters and workloads

• Preferred: understanding of SBOMs, image signing, and software supply chain controls

• Preferred: experience with FinOps and cloud cost management

• Preferred: background in financial, regulated, or audit-heavy environments

• Preferred: Professional Cloud DevOps Engineer, Cloud Architect, or similar certification

🏝️ Benefits

• Meal or food allowance

• Discounts on courses, universities, and language institutions

• Stefanini Academy — a platform providing free, current online courses with certificates

• Mentorship opportunities

• Benefits club offering discounts on consultations and medical tests

• Health insurance coverage

• Dental insurance

• Access to benefits and discounts at leading establishments

• Travel benefits program

• Pet care benefits