Devops Engineer

Dlocal LLP; São Paulo; On-site; BRL 180,000 - 300,000; Full time

Job summary

dLocal is seeking a DevOps Engineer to join the Cloud Platform team in Brazil. You will help evolve the infrastructure behind mission-critical services, partner with software engineers, Security, and Compliance to deliver reliable, secure platforms, and responsibly use AI-assisted tools with ownership of changes.

You will build and operate AWS infrastructure and Kubernetes platforms, implement Gateway API-based traffic management, develop Terraform modules, and design multi-region DR plans.

Qualifications

• Hands-on experience with production AWS infrastructure (compute, networking, storage, IAM, load balancers).
• Kubernetes production ops beyond app deploy; cluster operations, scheduling, security, troubleshooting.
• Practical experience with Gateway API and service mesh implementations.
• Strong Terraform and Git-based workflows, including modules, state, reviews, safe deployments.

Responsibilities

• Build and operate AWS infrastructure and production Kubernetes platforms with multi-region availability.
• Implement Gateway API-based traffic management and service mesh capabilities with observability and controlled rollouts.
• Develop reusable Terraform modules and infrastructure automation with version control and safe deployment practices.
• Design and exercise multi-region disaster recovery plans, align with RTO/RPO objectives, test failover and failback.
• Apply approved AI-assisted tools to IaC and script development, upgrade planning and runbooks.
• Participate in on-call rotation, respond to incidents, and drive automation to reduce toil.

Skills

AWS infra

Kubernetes ops

Terraform

Git workflows

Linux networking

HA/DR

AI-assisted tooling

Security basics

Gateway API

Service mesh

Tools

Envoy Gateway

Istio

Linkerd

Cilium

Argo CD

Flux

Helm

Kustomize

Job description

What’s the opportunity?

We are looking for a DevOps Engineer to join dLocal’s Cloud Platform team and help evolve the infrastructure behind our mission-critical services.

You will partner with software engineers, Security, and Compliance to deliver reliable, secure, and scalable platforms. We value strong technical fundamentals and responsible use of AI-assisted tools, with ownership of every change and operational decision.

What will I be doing?

• Build and operate AWS infrastructure and production Kubernetes platforms, managing capacity, lifecycle, autoscaling, and multi-region availability while balancing performance, security, and cost.
• Implement Gateway API-based traffic management and service mesh capabilities, including gateway and route configuration, mTLS, traffic policies, observability, and controlled rollouts. Troubleshoot connectivity and performance across entry points, workloads, proxies, and networks.
• Develop reusable Terraform modules and infrastructure automation using version control, peer review, testing, and safe deployment and rollback practices.
• Help design, implement, and exercise multi-region disaster recovery plans (DRP). Translate agreed recovery time and recovery point objectives (RTO/RPO) into recovery procedures, validate restores, test regional failover and failback, and track remediation actions.
• Apply approved AI-assisted tools to IaC and script development and review, upgrade planning, configuration drift investigations, analysis of sanitized operational evidence, troubleshooting hypotheses, and improvements to tests and runbooks.
• Participate in the infrastructure on-call rotation, respond to incidents, contribute to post-incident reviews, and automate improvements that reduce operational toil.

What skills do I need?

• Hands-on experience with production AWS infrastructure, including compute, networking, storage, IAM, and load balancing.
• Production Kubernetes experience beyond application deployment, covering cluster operations, scheduling, security, and troubleshooting.
• Practical experience with Kubernetes traffic management, Gateway API, and a service mesh implementation. Comparable ingress/proxy experience combined with hands-on Gateway API work is also relevant.
• Strong Terraform and Git-based engineering practices, including module design, state management, change review, and safe infrastructure delivery.
• Strong Linux and networking fundamentals, including DNS, TCP/IP, HTTP, TLS, routing, and systematic troubleshooting across infrastructure and application boundaries.
• Practical experience with high availability and disaster recovery, including backups, restores, recovery runbooks, and testing against RTO/RPO. Understand regional failure scenarios and the distinction between high availability and disaster recovery.
• Demonstrable AI-assisted infrastructure work. Be ready to explain a real workflow, how you validated the output, where the tool was wrong or unhelpful, and how you protected sensitive data and production systems.
• Understanding of cloud security fundamentals, including least privilege, secrets management, encryption, network controls, and secure change management.
• Clear communication, ownership, and effective collaboration with distributed engineering teams during planned work and incidents.

What would make you stand out?

• Proven delivery of multi-region recovery exercises, with dependency mapping and measured recovery results.
• Advanced experience with Gateway API controllers or service meshes, including upgrades, migrations, policy enforcement, and operational trade-offs. Examples include Envoy Gateway, Istio, Linkerd, and Cilium; expertise in every product is not required.
• Experience with GitOps and Kubernetes packaging tools such as Argo CD, Flux, Helm, or Kustomize.
• Experience building reusable AI-assisted workflows or integrations with bounded permissions, auditability, evaluation, and human approval controls.
• Experience with SLOs, error budgets, resilience testing, capacity planning, performance tuning, and cloud cost optimization.
• Experience supporting payments, financial services, or other regulated, availability-sensitive environments.