LWSA | Cloud Systems & Automation Engineer (DevSecOps)

Description

**Job Description** --------------------- LWSA is the convergence of multiple companies offering diverse yet complementary solutions — all united by a single goal: transforming businesses to help them grow and thrive through technology. **With our new organizational structure — including a refreshed brand identity — we are now LWSA: an integrated ecosystem of brands delivering comprehensive, modular solutions tailored to businesses of all sizes.** Our services include e-commerce platforms, ERP systems, marketplace integrations, point-of-sale (PDV) solutions, recurring billing, lead generation, credit services, and logistics, among others. Learn more about the area for this opportunity ➡ Cloud Systems & Automation Engineer (DevSecOps) The **Security Engineering** team ensures the resilience, scalability, and security of our Private Cloud. We operate at the intersection of infrastructure and security, focusing on automated governance, vulnerability management, and building a "self-healing" environment where compliance is maintained as code. Among daily tasks, we highlight infrastructure provisioning using Terraform (CloudStack/XenServer), creation and maintenance of Ansible playbooks for patch management, development of automation workflows in n8n to integrate security tools (Tenable), and ensuring our entire ecosystem operates under the GitOps philosophy. For this opportunity, we seek individuals with solid Linux administration expertise and Infrastructure-as-Code (IaC) tooling proficiency (Terraform/Ansible), but above all, those who embody the "Automate Everything" mindset. We look for analytical professionals with an owner’s mentality who reject repetitive manual tasks — transforming technical challenges into invisible, automated solutions. **Responsibilities and Duties** ----------------------------------- **Your day-to-day will include:** * **Provision and manage resources** within our Private Cloud (CloudStack), ensuring 100% of infrastructure is delivered via **Terraform** (IaC). * **Maintain and evolve** the XenServer hypervisor layer and the CloudStack orchestration platform. * **Continuously monitor** the environment using **Tenable**, identifying security gaps and ensuring compliance. * **Scale OS patch automation** using **Ansible and n8n**, guaranteeing secure, zero-downtime updates (Rolling Updates). * **Eliminate manual tasks** by converting vulnerability remediations into reusable, automated playbooks. * **Ensure environment integrity** via **GitOps**, where GIT serves as the single source of truth and every change undergoes code review and CI/CD pipelines. * **Integrate tools** by developing intelligent workflows in **n8n**, connecting security alerts with our messaging and automation systems. **Requirements and Qualifications** ------------------------------ **To excel in this role, you’ll need:** * **Strong IaC expertise:** Advanced experience with **Terraform** and **Ansible** (Playbooks, Roles, and configuration automation). * **Private Cloud experience:** Solid hands-on experience with **Apache CloudStack** and **XenServer**. * **Operational Security focus:** Practical knowledge of **Tenable** and vulnerability remediation methods (Hardening, SSL/TLS, Ciphers). * **Automation mindset:** Experience with **n8n** or similar workflow tools for process integration. * **DevSecOps culture:** Proficiency in **GIT** (Gitflow, Conventional Commits) and foundational CI/CD concepts. * **Solid systems foundation:** Advanced Linux system administration skills. * **Behavioral profile:** Obsessive focus on process automation and strong analytical ability to interpret technical reports and propose business-aligned solutions. **Bonus points if you also have:** * Knowledge of **XCP-ng** or **Xen Orchestra**. * Experience integrating security scanners directly into the development pipeline. * Proficiency in **Python** or **Shell Script** for custom automation development. * Industry certifications: **LPI**, **HashiCorp Certified (Terraform)**, or security-focused certifications. **Additional Information** -------------------------- **What benefits does LWSA offer?** Medical insurance; Dental insurance; Transportation allowance or free parking; Free shuttle service from João Dias terminal to Locaweb; Meal/Voucher allowance; Childcare assistance; Life insurance; Gympass; * Unlimited coffee machines; * On-site massage and occupational gymnastics; Relaxation room with TV, billiards table, card games, table tennis, video games, and bean bags; Day off; Annual PPR (Profit Sharing Program); Quality of Life and Well-being Program; Partnerships with educational and leisure institutions; **Where are we located?** Rua Itapaiúna, 2434 — Parque do Morumbi, São Paulo — SP | 05707-001 **Important note:** This and all open positions at LWSA are open to all individuals, regardless of gender, ethnicity, sexual orientation, disability, and/or socioeconomic background. We emphasize that our job openings are fully accessible to people with disabilities (PcDs).