DevOps / SRE / DevSecOps Engineer (AWS)

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a DevOps / SRE / DevSecOps Engineer (AWS) based in Brazil.** This role offers the opportunity to build and operate secure, reliable, and high-performing cloud infrastructure for complex software systems. You will work extensively with AWS services, containerized workloads, databases, Infrastructure as Code, and modern observability practices. Your work will directly contribute to system availability, deployment reliability, security, and operational resilience. You will help establish strong automation, monitoring, incident response, and rollback practices across production environments. The position combines hands-on engineering with a security-first mindset and close collaboration with distributed technical teams and clients. You will contribute to challenging projects while working with modern cloud technologies and established engineering practices. This is an opportunity to take meaningful ownership of critical infrastructure and accelerate your technical and professional growth. ### Accountabilities - Design, deploy, and operate secure, scalable, and highly available AWS infrastructure supporting large and complex software systems. - Manage AWS services including Amazon Elastic Container Service (ECS) and Fargate, Amazon Relational Database Service (RDS) and Aurora, Application Load Balancer (ALB), Virtual Private Cloud (VPC), Identity and Access Management (IAM), CloudWatch, Key Management Service (KMS), and S3. - Operate Aurora and PostgreSQL production environments, including Multi-AZ failover, read replicas, and replica-lag monitoring. - Build and maintain Infrastructure as Code (IaC) using Terraform or CloudFormation to ensure consistent and repeatable infrastructure management. - Manage containerized applications using Docker and ECS/Fargate. - Build, maintain, and continuously improve Continuous Integration and Continuous Delivery (CI/CD) pipelines and deployment automation. - Establish and test reliable rollback procedures, including conducting rollback drills to validate recovery paths. - Implement monitoring, logging, and observability practices using OpenTelemetry, CloudWatch, or similar technologies. - Conduct load testing using tools such as k6 and operate services against defined latency Service Level Objectives (SLOs) and error budgets. - Apply security-first practices across infrastructure and applications, including vulnerability scanning, secrets management, compliance controls, and system hardening. - Support System and Organization Controls 2 (SOC 2) or similar audit evidence requirements and participate in client security reviews. - Participate in incident response and on-call rotations, leading or contributing to root-cause analysis and corrective actions. - Support secure multi-tenant environments, database migrations, schema changes, and long-term data retention strategies where required. - Identify opportunities to improve reliability, security, automation, performance, and operational efficiency. - Take full ownership and accountability for infrastructure deliverables while maintaining strong client and team commitments. ### **Requirements** - 5+ years of professional experience in DevOps, Site Reliability Engineering (SRE), or DevSecOps roles. - Strong hands-on experience with AWS services, particularly ECS/Fargate, RDS/Aurora, ALB, VPC, IAM, CloudWatch, KMS, and S3. - Proven production experience operating Aurora/PostgreSQL, including Multi-AZ failover, read replicas, and replica-lag monitoring. - Strong experience with Infrastructure as Code using Terraform or CloudFormation. - Hands-on experience with Docker and container orchestration using ECS/Fargate. - Demonstrated experience building and maintaining CI/CD pipelines and deployment automation. - Experience implementing and testing rollback strategies and conducting rollback drills. - Strong knowledge of monitoring, logging, and observability tools such as OpenTelemetry and CloudWatch. - Experience with load testing tools such as k6 and operating production services against latency SLOs and error budgets. - Security-focused approach with experience in vulnerability scanning, secrets management, infrastructure hardening, and compliance practices. - Experience supporting SOC 2 or similar audit evidence collection and participating in client security assessments. - Experience with incident response, on-call operations, troubleshooting, and root-cause analysis. - Substantial experience supporting large, complex production systems. - Experience with S3 Object Lock and long-term archival for audit or compliance retention is preferred. - Experience supporting secure multi-tenant environments, including PostgreSQL Row-Level Security (RLS), is preferred. - Experience with database migration tooling and expand/contract schema change strategies is preferred. - Experience in compliance-sensitive or audit-heavy environments, such as fintech or Telecommunications Consumer Protection Act (TCPA) compliance, is preferred. - Bachelor's degree required. - Strong problem-solving and analytical skills with the ability to diagnose complex technical issues effectively. - Exceptional ownership and accountability for deliverables and operational outcomes. - Client-focused approach with a strong commitment to team and project objectives. - Strong knowledge of engineering best practices and consistent adherence to established standards. - Positive, proactive, and collaborative mindset with a can-do attitude. - Meticulous attention to detail and commitment to reliability and quality. - Ability to maintain working-hour overlap with teams operating during US business hours. ### **Benefits** - Competitive salary and bonuses, including performance-based salary increases. - Generous paid time off policy. - Flexible working hours. - Fully remote work. - Continuing education, professional training, and conference opportunities. - Company-sponsored coursework, examinations, and professional certifications. - Exposure to a diverse range of challenging and meaningful client projects. - Opportunities to work with modern cloud and infrastructure technologies. - Collaboration with experienced engineering professionals. - Opportunities for accelerated career growth and professional development. - The opportunity to contribute directly to client outcomes through high-impact infrastructure and reliability initiatives.