Senior DevSecOps Engineer

Ciklum; Brasil; Presencial; BRL 350.000 - 550.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Company-paid medical insurance

Mental health programs

Udemy license

Language courses

Company-paid certifications

20 working-days paid vacation

Descripción de la vacante

Ciklum in Brazil is seeking a Senior DevSecOps Engineer to join our cross-functional team. You will architect and maintain the secure infrastructure for an enterprise-grade Agent Development Platform, focusing on sandboxing, zero-trust connectivity, and secure data stores.

You will lead the setup of AWS environments, implement Firecracker MicroVMs, and enforce egress controls, while integrating WorkOS/IDP for multi-tenancy and secure access.

Formación

• Deep expertise in AWS, Kubernetes, and container security; experience with Firecracker MicroVMs is highly desirable.
• Hands-on experience managing and scaling vector databases (Chroma, PGVector) and graph databases for AI applications.
• Strong understanding of zero-trust architecture, OWASP principles, and secure design for AI systems.

Responsabilidades

• Agent Sandboxing & Isolation: Implement and manage Firecracker MicroVMs to ensure secure runtimes.
• Secure Data Infrastructure: Provision and optimize multi-layered data stacks including PostgreSQL, ChromaDB/PGVector, and Neo4j.
• Event Orchestration: Build and manage event streams (AWS SQS, EventBridge, Kafka) for agent communication and HITL escalation.
• Infrastructure as Code: Automate provisioning of AWS infrastructure and Kubernetes clusters using industry-standard tools.
• Security & Identity Integration: Implement WorkOS/IDP for B2B identity management and multi-tenancy.
• Network Hardening: Design and enforce strict egress firewalls and proxy-only outbound routing.

Conocimientos

AWS

Kubernetes

Firecracker MicroVMs

Zero-trust architecture

CI/CD automation

Python

Bash

Temporal

PostgreSQL

GraphDB

Herramientas

Neo4j

ChromaDB

PGVector

PostgreSQL

Kafka

AWS SQS

Descripción del empleo

Ciklum is looking for a Senior DevSecOps Engineer to join our team in Brazil.

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About the role:

As a Senior DevSecOps Engineer, you'll become a part of a cross-functional development team engineering experience of tomorrow. The DevSecOps Engineer is responsible for architecting and maintaining the high-security infrastructure required for an enterprise-gradeAgent Development Platform (ADP). You will be tasked with building the secure "sandbox" where autonomous agents live, ensuring zero-trust connectivity and managing the specialized data stores that power agentic reasoning. You will lead the setup of the AWS production environment and the implementation ofFirecracker MicroVMs to provide isolated, ephemeraly runtimes for agents. You are the guardian of the platform's "Egress Controls," ensuring that while agents can reason over proprietary data, they can never exfiltrate it.

Responsibilities:

• Agent Sandboxing & Isolation: Implement and manageFirecracker MicroVMs (or restricted Kubernetes/Docker environments) to ensure agents execute in strictly isolated, secure runtimes
• Secure Data Infrastructure: Provision and optimize the platform's multi-layered data stack, includingPostgreSQL (OLTP),ChromaDB/PGVector (VectorStore), andGraphDB (Neo4j) for relational knowledge mapping
• Event Orchestration: Build and manage high-performanceEvent Streams (AWS SQS, Event Bridge, or Kafka) to handle agent-to-agent communication and Human-in-the-Loop (HITL) escalation triggers
• Infrastructure as Code (IaC): Automate the provisioning of AWS cloud infrastructure and Kubernetes clusters using industry-standard tools
• Security & Identity Integration: ImplementWorkOS/IDP for B2B identity management and multi-tenancy, ensuring strict logical separation of tenant data and configurations
• Network Hardening: Design and enforce strict egress firewalls and proxy-only outbound routing to prevent data exfiltration by autonomous agents

Requirements:

• Cloud & Containers: Deep expertise inAWS,Kubernetes, and container security; proven experience withFirecracker MicroVMs is highly desirable
• Database Management: Hands-on experience managing and scalingVector Databases (Chroma, PGVector) andGraph Databases for AI applications
• Security First Mindset: Strong understanding of zero-trust architecture, OWASP principles, and secure design for AI systems
• Messaging & Events: Proficiency in managing event-driven architectures and streaming platforms for real-time data processing
• Automation: Advanced scripting skills (Python, Bash) and a track record of implementing automated security gates in CI/CD pipelines
• Workflow Orchestration: Experience withTemporal for managing long-running, multi-stage agentic workflows
• Compliance: Experience preparing infrastructure forSOC 2,ISO 27001, orGDPR readiness
• Agentic Frameworks: Familiarity withLangSmith orLangfuse for observability and tracing of agent workloads

What’s in it for you?

• Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and mental health programs, 5 undocumented sick-leave days per year
• Tailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses and company-paid certifications
• Growth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globally
• Long-term employment with 20 working-days paid vacation and local bank holidays
• Opportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally and fulfill your potential
• Global impact: work on large-scale projects that redefine industries with international and fast-growing clients
• Welcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company and regular team-building events

About us:

At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.

As we expand into Latin America, every Ciklumer is helping to shape our story. Collaborate with seasoned experts and make a global impact backed by two decades of industry leadership.

Explore, empower, engineer with Ciklum!