[Job- 31345]Senior DevOps Engineer (Cloud Network Foundation), Brazil

3 weeks, 1 day ago
Full-time
Senior
DevOps and Infrastructure
CI&T

CI&T

CI&T is a global digital technology agency empowering agile growth for leading companies through advanced technologies with a team of 2000 experts worldwide.

Internet Software & Services
5K-10K
Founded 1995

Description

  • Own end-to-end AWS network foundations using Transit Gateway, hub-and-spoke VPCs, centralized inspection, egress, ingress, shared services, and workload tiers.
  • Define, implement, and test routing policies, including firewall inspection paths and traffic asymmetry prevention.
  • Design and implement Transit Gateway Connect over GRE with BGP, redundant peers, and agreed ASNs.
  • Coordinate networking requirements with third-party SD-WAN vendors.
  • Manage AWS IPAM pool hierarchies, delegated administration, and RAM shares across accounts.
  • Implement AWS Network Firewall with stateful rules, default-deny posture, domain allowlisting, and managed threat signatures.
  • Develop and maintain multi-account Terraform with phase-based state separation and GitHub OIDC deployments.
  • Implement drift detection, static validation, and inheritable CI/CD pipelines.
  • Manage centralized logging, resource policies, KMS key policies, and service-linked roles, verifying log delivery in practice.
  • Document architectural decisions, prefix allocations, rejected options, and deviations.

Requirements

  • Hands-on experience building, breaking, and fixing hub-and-spoke AWS networks with centralized inspection.
  • Strong knowledge of Transit Gateway association, propagation, appliance mode, and routing behavior.
  • Experience with VPC networking, AWS Network Firewall, NAT and egress control, PrivateLink, and Route 53 Resolver.
  • Experience with AWS Organizations, Control Tower, OUs, SCPs, delegated administrators, and RAM.
  • Experience inheriting and troubleshooting an existing AWS landing zone.
  • Proficiency in Terraform module design, multi-account and multi-phase state layouts, and safe plan review.
  • Experience with Site-to-Site VPN or Direct Connect, GRE, BGP peering, route advertisement, and ASN allocation.
  • Ability to validate infrastructure by querying live environments and diagnosing routing or firewall-path issues.
  • Clear, precise technical writing and documentation skills.
  • Advanced or fluent English is required; AWS Advanced Networking Specialty certification, SD-WAN experience, AFT familiarity, industrial-sector exposure, and Portuguese fluency are preferred.

Benefits

  • Health and dental insurance, life insurance, and meal and food allowances.
  • Childcare assistance and extended paternity leave.
  • Profit Sharing and Results Participation (PLR).
  • Gym, wellness, physical-health, and mental-health programs through Wellhub, Gympass, and TotalPass.
  • Continuous learning through CI&T University, online learning partnerships, and a language-learning platform.
  • Pregnancy and responsible parenting course, discount club, and inclusion and accommodation support.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Staff Cloud Architect L4

Robots & Pencils 51-250 IT Services

Robots & Pencils is seeking a Staff Cloud Architect for a six-month contract to lead end-to-end architecture and delivery of complex cloud, data, and AI/ML systems for enterprise client engagements.

Apache Airflow Apache Spark AWS Azure CI/CD dbt Docker GitHub Actions HIPAA Hugging Face Kafka Kubernetes Machine Learning Microservices MLflow MLOps MongoDB PostgreSQL Prefect Pulumi Python PyTorch Serverless Snowflake TensorFlow Terraform Vertex AI
6 hours, 13 minutes ago

Infrastructure Software Engineer, Metadata Services

Dropbox 1K-5K Internet Software & Services

Software Engineer on Dropbox’s Metadata team, building and operating distributed database infrastructure that provides reliable, low-latency, strongly consistent data access for millions of users and internal services.

C C++ Go Java Python Rust
6 hours, 44 minutes ago

Senior Infrastructure Engineer

Sysdig 251-1K IT Services

As a Site Reliability/Infrastructure Engineer at Sysdig, you will build and operate multi-cloud and on-premise infrastructure while improving the reliability, scalability, security, and performance of production systems.

AWS Azure Bash Docker Go Kubernetes Linux Microservices Python
6 hours, 59 minutes ago

Cloud Security Engineer

Smile Digital Health 251-1K IT Services

Smile Digital Health is seeking a Cloud Security Engineer to design, automate, deploy, and support secure production-grade infrastructure for healthcare data platforms across AWS, Azure, OCI, and GCP.

Ansible AWS Azure Docker HIPAA Kubernetes OpenShift Terraform
2 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers