[Job- 31345]Senior DevOps Engineer (Cloud Network Foundation), Brazil

1 week, 6 days ago
Full-time
Senior
DevOps and Infrastructure
CI&T

CI&T

CI&T is a global digital technology agency empowering agile growth for leading companies through advanced technologies with a team of 2000 experts worldwide.

Internet Software & Services
5K-10K
Founded 1995

Description

  • Own end-to-end AWS network foundations using Transit Gateway, hub-and-spoke VPCs, centralized inspection, egress, ingress, shared services, and workload tiers.
  • Define, implement, and test routing policies, including firewall inspection paths and traffic asymmetry prevention.
  • Design and implement Transit Gateway Connect over GRE with BGP, redundant peers, and agreed ASNs.
  • Coordinate networking requirements with third-party SD-WAN vendors.
  • Manage AWS IPAM pool hierarchies, delegated administration, and RAM shares across accounts.
  • Implement AWS Network Firewall with stateful rules, default-deny posture, domain allowlisting, and managed threat signatures.
  • Develop and maintain multi-account Terraform with phase-based state separation and GitHub OIDC deployments.
  • Implement drift detection, static validation, and inheritable CI/CD pipelines.
  • Manage centralized logging, resource policies, KMS key policies, and service-linked roles, verifying log delivery in practice.
  • Document architectural decisions, prefix allocations, rejected options, and deviations.

Requirements

  • Hands-on experience building, breaking, and fixing hub-and-spoke AWS networks with centralized inspection.
  • Strong knowledge of Transit Gateway association, propagation, appliance mode, and routing behavior.
  • Experience with VPC networking, AWS Network Firewall, NAT and egress control, PrivateLink, and Route 53 Resolver.
  • Experience with AWS Organizations, Control Tower, OUs, SCPs, delegated administrators, and RAM.
  • Experience inheriting and troubleshooting an existing AWS landing zone.
  • Proficiency in Terraform module design, multi-account and multi-phase state layouts, and safe plan review.
  • Experience with Site-to-Site VPN or Direct Connect, GRE, BGP peering, route advertisement, and ASN allocation.
  • Ability to validate infrastructure by querying live environments and diagnosing routing or firewall-path issues.
  • Clear, precise technical writing and documentation skills.
  • Advanced or fluent English is required; AWS Advanced Networking Specialty certification, SD-WAN experience, AFT familiarity, industrial-sector exposure, and Portuguese fluency are preferred.

Benefits

  • Health and dental insurance, life insurance, and meal and food allowances.
  • Childcare assistance and extended paternity leave.
  • Profit Sharing and Results Participation (PLR).
  • Gym, wellness, physical-health, and mental-health programs through Wellhub, Gympass, and TotalPass.
  • Continuous learning through CI&T University, online learning partnerships, and a language-learning platform.
  • Pregnancy and responsible parenting course, discount club, and inclusion and accommodation support.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Cloud Infrastructure Engineer

ITHAKA 251-1K Diversified Consumer Services

ITHAKA is hiring a Senior Cloud Infrastructure Engineer to build and operate cloud platforms, infrastructure, and developer tools that help its product engineering teams deliver reliable software serving millions of users.

AWS CI/CD Cloudflare Go Grafana Kubernetes OpenTelemetry Python Terraform
2 days, 14 hours ago

Data Center Engineer (Trading Infrastructure)

Eqvilent 11-50 Capital Markets

Data Center Engineer supporting a globally distributed trading infrastructure by validating, standardizing, maintaining, and improving server and network hardware across laboratory and operational environments.

Linux
2 days, 14 hours ago

Cloud Security Engineer II

Tripadvisor 1K-5K Consumer Services

Tripadvisor Group is seeking a Cloud Security Engineer II to design, automate, and scale secure-by-default cloud infrastructure across AWS and supporting Azure and GCP environments.

AWS Azure Bash CI/CD CloudFormation DevSecOps DNS Docker Encryption GCP GitHub Actions GitLab CI Go Kubernetes OAuth OpenID Connect Python SAML Serverless Terraform WAF
3 days, 15 hours ago

Infrastructure Engineer | Remote

360dialog 51-250 Media

360Dialog is seeking a senior infrastructure professional to operate and evolve production systems for its global WhatsApp business-messaging platform.

Argo CD Bash GitHub Actions Go Grafana HashiCorp Vault Helm Kubernetes Python Secrets Management Terraform
3 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers