Brazil
Keyrus Brazil
Credit Saison Brazil
DevOps Engineer Sr Associate
Brazil
São Paulo, São Paulo, Brazil
PythonAWSKubernetesGoTerraform
About the opportunity
DevOps Engineer Sr Associate
The Senior SRE / DevOps Engineer is the hands-on owner of reliability for CSBR's platforms on AWS: the Matera core-banking and payments stack, and the lending, data, and AI workloads around it. Reporting to the VP, Innovation and Tech, the Engineer runs the multi-account AWS estate, container and serverless runtimes, infrastructure as code, CI/CD, observability, and incident response, working closely with engineering, Information Security, Compliance, and Operations, and with providers such as Matera and AWS.
Core Banking & Payments (Matera)
- Operate the Matera core-banking and payments modules on AWS EKS across all environments: cluster upgrades, scaling, secrets, certificates, and the release path from vendor delivery to production.
- Lead production readiness for go-live and major releases – stress tests, failover and restore drills, runbooks, cutover and rollback plans – and act as technical counterpart to Matera for incidents and upgrades.
Application, Data & AI Workloads
- Run customer-facing credit applications on serverless AWS stacks (Lambda, API Gateway, Amplify) defined in AWS CDK.
- Operate the data lake and pipelines (S3, Iceberg, Glue, Athena, Dagster) that feed portfolio and investor reporting.
- Operate internal apps and AI workloads (agents, MCP servers) on ECS Fargate, behind Entra ID and Cognito single sign-on.
Cloud Platform & CI/CD
- Evolve the multi-account AWS organization – Control Tower, Identity Center, Transit Gateway, Network Firewall – with every change delivered through Terraform or CDK and peer review.
- Maintain the standardized GitHub Actions delivery pipeline, with promotion gates and auditable change records, and automate toil in Python and Bash.
- Keep AWS spend under control with tagging, right-sizing, and regular cost reviews.
Observability & Incident Response
- Define SLOs for payment-critical flows (Pix, boleto, disbursement, settlement) and data pipelines, with matching dashboards and alerts on CloudWatch, Prometheus, and Grafana.
- Lead on-call, incidents, and blameless postmortems, and own disaster recovery with tested RTO and RPO targets.
Security & Compliance
- Keep the estate compliant with Central Bank requirements (CMN Resolution 4,893/2021) and LGPD: remediate GuardDuty, Security Hub, and Inspector findings, and enforce least-privilege IAM and secrets management.
- Keep regulatory-reporting jobs on schedule and produce evidence for auditors and regulators.
Leadership & Special Projects
- Set reliability standards, review designs for production readiness, and mentor engineers.
- Support new credit and payment products as they launch, and other initiatives as prioritized by the VP, Innovation and Tech.
Requirements
- Native or bilingual Portuguese and professional English, equivalent to CEFR B2 or above.
- Degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.
- 8+ years in infrastructure, SRE, or DevOps, including 3+ years running production AWS workloads in financial services – banks, payment institutions, fintechs, or lenders.
- Deep AWS expertise (EKS, ECS, Lambda, VPC networking, IAM, KMS, RDS, S3, CloudWatch) and multi-account governance with Control Tower.
- Production Kubernetes (EKS, Helm, autoscaling), Terraform and AWS CDK, and CI/CD with GitHub Actions or GitLab CI. ArgoCD and Istio desirable.
- Observability with Prometheus, Grafana, Loki, OpenTelemetry, or Datadog, and SLO-based alerting.
- Strong Linux administration and scripting in Python and Bash.
- Knowledge of Pix and boleto, lending operations, Central Bank IT requirements (CMN Resolution 4,893/2021), and LGPD.
- Track record leading incident response and mentoring SRE or infrastructure teams, with availability for on-call.
- Hands-on Matera experience on Kubernetes, including vendor coordination for releases and incidents, strongly preferred.
- Desirable: taking a core-banking or payments platform to go-live; data-lake platforms (Iceberg, Athena, Dagster); LLMOps; AWS Professional, CKA, or Prometheus certifications.
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile