IT DevOps Engineer

Eurofins GSC IT DC; Indaiatuba; Presencial; BRL 120.000 - 160.000; Tempo integral

Resumo da oferta

A global technology services provider in Brazil seeks a skilled DevOps Engineer to deploy and maintain production-grade infrastructure on Azure and AWS. The ideal candidate will have over 5 years of experience with Terraform and Azure Kubernetes Service. Responsibilities include managing CI/CD pipelines, implementing disaster recovery strategies, and ensuring compliance across cloud providers. Strong understanding of automation and security protocols is essential. This role promises a dynamic work environment with opportunities for professional growth.

Serviços

Professional development opportunities

Health and wellness programs

Flexible working hours

Qualificações

• 5+ years of DevOps/SRE experience in production environments.
• Expert-level Terraform experience with Terraform Cloud.
• Strong understanding of OAuth 2.0 and SAML protocols.

Responsabilidades

• Deploy and maintain infrastructure on Azure and AWS.
• Manage Azure Kubernetes Service clusters across environments.
• Implement CI/CD workflows using Azure DevOps Pipelines.

Conhecimentos

Terraform expertise

Production Azure experience

Kubernetes proficiency

Docker expertise

OAuth 2.0 understanding

Ferramentas

HashiCorp Vault

Azure DevOps Pipelines

KEDA

Helm

Redis

Descrição da oferta de emprego

Job Description

Infrastructure & Platform Management

• Deploy, and maintain production-grade infrastructure on Azure and AWS using Terraform and Terraform Cloud workspaces
• Manage Azure Kubernetes Service (AKS) clusters running the IAM platform across multiple environments (dev->production)
• Implement and maintain Infrastructure as Code (IaC) best practices for repeatability, version control, and disaster recovery
• Oversee multi-workspace Terraform deployments with complex dependency management
• Implement disaster recovery (DR) strategies across Azure and AWS regions
• Manage and secure Azure platform services, including networking, identity, compute, and platform security controls

Container & Orchestration

• Deploy and manage containerized .NET 8 applications on Kubernetes using Helm charts
• Implement autoscaling strategies using KEDA (Kubernetes Event-Driven Autoscaling) for Redis Streams and message processing workloads
• Manage Kubernetes deployments including StatefulSets, Deployments, Services, ConfigMaps, and Secrets
• Optimize container images using multi-stage Docker builds and implement container security best practices
• Implement pod security policies, network policies, and RBAC controls

Identity & Access Management Migration

• Deploy and manage self-hosted disaster recovery identity infrastructure in both Azure and AWS
• Integrate identity federation, single sign-on (SSO), and OAuth/OIDC flows with the IAM platform

Secrets & Security Management

• Use HashiCorp Vault for secrets management, dynamic credentials, and PKI infrastructure
• Configure Vault PKI for certificate management, mTLS, and secure inter-service communication
• Manage Redis TLS/SSL configurations and certificate rotation
• Configure Azure Key Vault integrations where applicable
• Implement security scanning, vulnerability management, and compliance controls

CI/CD & Automation

• Build and maintain Azure DevOps Pipelines for continuous integration and deployment
• Implement GitOps workflows and deployment automation
• Create and maintain Makefiles and shell scripts for build, deploy, test, and cleanup automation
• Implement automated testing strategies including Helm chart tests and integration tests

Multi-Cloud Strategy

• Ensure consistent security posture and compliance across cloud providers
• Manage costs and resource optimization across multiple cloud platforms

Qualifications

Core DevOps & Cloud Infrastructure

• 5+ years of DevOps/SRE experience in production environments
• Expert-level Terraform experience with Terraform Cloud, remote state, and workspace management
• Production Azure experience (or another cloud provider) including AKS, Azure Database for PostgreSQL, Virtual Networks, Private Endpoints, and Managed Identities or equivalent services
• Kubernetes proficiency including Helm, operators, custom resources, and cluster management

Container & Application Technologies

• Docker expertise with multi-stage builds and container optimization
• GitOps methodologies and declarative infrastructure
• JAVA based application configuration and administration
• KEDA autoscaling implementation and tuning is a plus
• Experience with Redis (Streams, TLS/mTLS, clustering) is a plus
• Apache ActiveMQ Artemis or similar message broker experience is a plus

Identity & Access Management

• Strong understanding of OAuth 2.0, OIDC, SAML, and federation protocols
• Experience with Azure Entra ID (Azure AD) including app registrations, service principals, and conditional access or similar IDP offering
• Experience with Ping Identity suite (Ping Identity, Ping Federate) is a plus
• SailPoint IIQ or similar identity governance platform experience is a plus
• PingOne AIC (Adaptive Identity Cloud) implementation experience is a plus

Secrets & Security

• HashiCorp Vault production deployment and management is a plus
• PKI infrastructure, certificate lifecycle management, and mTLS is a plus

Automation & Scripting

• Azure DevOps Pipelines (YAML pipelines preferred)

Additional Information

Professional working proficiency in English is a requirement, including the ability to read, write and speak in English.