**Job Description** --------------------- We are looking for a **Mid-level DevOps Engineer** to join our cloud team. The person in this role will work directly on administering and modernizing our cloud environments, ensuring availability, performance, security, and scalability of the systems supporting our applications. We are currently undergoing **platform modernization**, offering real opportunities to contribute to key technical decisions throughout this journey. We seek someone with a **proactive mindset**, who enjoys taking ownership of initiatives and influencing technical decisions. Day-to-day responsibilities include evolving our Kubernetes-based platform, building continuous delivery automation, and consolidating observability practices — always in close partnership with development teams to accelerate high-quality, secure, and reliable software delivery. **Responsibilities and Duties** ----------------------------------- * Develop and maintain CI/CD pipelines, ensuring continuous, secure, and auditable deliveries. * Evolve our Kubernetes platform — manifests, Helm charts, operators, and cluster policies — following the GitOps model. * Serve as the team’s technical reference: lead architectural decisions, take ownership of key initiatives, and guide the platform’s technical direction. * Implement and maintain infrastructure as code (IaC), promoting standardization and reuse. * Collaborate with development teams on continuous integration, defining deployment strategies (blue/green, canary), and resolving bottlenecks in the delivery pipeline. * Monitor and optimize service performance and availability, proactively responding to alerts and incidents. * Track and optimize cloud infrastructure costs using FinOps practices (e.g., waste identification, rightsizing, reservation/savings plan planning). * Support the development and evolution of metrics, SLIs/SLOs, dashboards, and alerts within our observability stack. * Maintain and operate messaging and queuing services used by development teams. * Implement security practices across all application lifecycle phases (shift-left), including secret management, image scanning, and cluster hardening. * Conduct root cause analysis (RCA) of incidents and implement corrective actions to prevent recurrence. * Support legacy environment modernization by migrating workloads to Kubernetes and standardizing tools and processes. * Promote DevOps culture by disseminating best practices, documenting procedures, and mentoring colleagues on adopted tools and workflows. * Contribute to the platform’s technical roadmap by proposing improvements, performing trade-off analyses, and delivering proof-of-concepts. **Requirements and Qualifications** ------------------------------ * Solid experience with containers and orchestration (Docker and Kubernetes). * Experience with automation and infrastructure-as-code tools (Terraform and Ansible). * Experience operating cloud environments. * Experience administering Linux systems. * Experience with CI/CD tools and Git version control practices. * Familiarity with observability practices (logs, metrics, tracing) and tools such as Prometheus, Grafana, or equivalents. * Basic scripting knowledge in Bash and Python for daily automation tasks. * Understanding of networking, DNS, TLS, and security applied to cloud-native environments. * Technical English proficiency for reading documentation. * Continuous pursuit of process improvement, automation, and reduction of toil. #### **YOU WILL STAND OUT IF YOU HAVE:** * AWS Certified Cloud Practitioner or AWS Certified Solutions Architect certification. * LPIC, CKA, CKAD, or similar certification. * Proven experience with Helm, GitOps (ArgoCD, Flux), and Kustomize. * Kubernetes cluster autoscaling experience focused on usage optimization and cost reduction. * Production-grade observability experience (Grafana, Prometheus, AlertManager, Zabbix). * Experience with ingress controllers (Traefik, NGINX) and service mesh. * Experience managing container image and package repositories, along with supply chain security policies. * Experience managing corporate access and identity (SSO, Active Directory). * Experience with messaging systems (Kafka, RabbitMQ). * Experience managing secrets in Kubernetes (External Secrets Operator, Vault, or equivalents). * Experience with automated policy enforcement (policy-as-code) in Kubernetes (Kyverno, OPA/Gatekeeper, or equivalents). * Experience building custom images (Packer, AMIs/golden images). **Additional Information** -------------------------- * Competitive salary package; * Flexible Benefit Plan (you decide how to use it based on your needs: culture, transportation apps, subscriptions, fitness, meals, etc.); ️ * Unimed Unipart Health Insurance; * Career development path; * Remote work; * Birthday leave; * Short Friday; * Collaborative and dynamic work environment.
João Silva
Indeed · HR
João Silva
Indeed · HR
