Senior Platform Engineer

Ebury is a leading global fintech company that empowers businesses to trade and grow internationally. It offers a comprehensive suite of products, including international payments and collections, FX risk management, trade finance, and API integrations. Founded in 2009 by Juan Lobato and Salvador García, Ebury is one of the fastest-growing global fintechs, with over 1,700 employees and 38 offices in more than 25 countries.

Senior Platform Engineer

São Paulo Office - Hybrid: 4 days in the office, 1 day working from home

We are looking for a Senior Platform Engineer that is in line with the technological stack we use. If you don't have full adherence, don't worry, we like the diversity of knowledge and you can certainly learn a lot from our team. As part of the team, you will be responsible for helping to build an Engineering Platform aligned with the guidelines of our global team at Ebury.

What we offer:

• Competitive salary and benefits package
• Discretionary bonus based on performance
• Continuous personal development through training and certification
• We are Open Source friendly, following Open Source principles in our internal projects and encouraging contributions to external projects

How we work today:

• Product-oriented multidisciplinary teams.
• Agile methodology.
• Scalable architecture oriented towards microservices.
• Microservices written in GoLang, Python, Kotlin, Node.js, and React.
• High processing capacity with intercommunication using GRPC/Kafka.
• Continuous integration and deployment in Google Cloud (GCP).
• Automation using GIT, Jenkins, Spinnaker, Ansible, and Terraform.
• Data persistence in DataStore.
• Monitoring based on 'observability' techniques using Prometheus.
• Immutable infrastructure with containers managed via Kubernetes.

Responsibilities of the Senior Platform Engineering Role:

• Discuss and help define service owners created in GCP (Google Cloud) for the business through a RACI Matrix.
• Define and create centralized access management controls for resources created by teams in GCP (Google Cloud).
• Implement a robust integration and shutdown process with the integration of access request and approval workflows through automations in JIRA.
• Help define and deploy a standardized baseline for creating new projects to avoid the recurring proliferation of non-standard projects within the company.
• Develop standardized guidelines for creating new projects, covering naming conventions, resource allocations, and configurations.

On Security:

• Design and implement monitoring controls for access to keys and their related functions.
• Introduce a comprehensive RBAC system within GCP, ensuring that users and service accounts receive permissions strictly based on their roles and responsibilities following the Principle of Least Privilege (PoLP).
• Governance and creation of guardrails for platform self-service automation;
• Governance and creation of 'Golden Paths' automation for engineering teams;
• Governance and creation of observability for resources created through the engineering platform.

Requirements and Qualifications:

• A business level of English and Spanish would be a plus.
• Analytical, resilient, and multitasking profile.
• Management capability.
• Experience facilitating the adoption of IT standards and processes.
• Advanced knowledge of OS (Linux).
• Aptitude for scripting programming and IaC (Infrastructure as Code).
• Knowledge in Networking (TCP/IP, Firewall, DNS, Routing, etc.).
• Cloud Platform operation in GCP (e.g., Function, Cloud SQL, Buckets, GKE, Firestore, VPC, Cloud DNS, IAM, Instances) and/or AWS (e.g., S3, RDS, EC2, ECS, Lambda, EKS, DynamoDB, IAM, CloudFront, VPC, R53).
• Knowledge of CI/CD (Tools such as: GitHub, Github Actions, Jenkins, ArgoCD. Practices: Build, test, push, deploy stages).
• Orchestration of plugins and addons (K8S, EKS, GKE, Kops, Kubespray, Rancher, Helm, Nginx Ingress Controller or equivalent).
• Knowledge of Observability using tools such as: (Prometheus, Grafana, Jaeger, AlertManager, Kiali, ELK Stack, Loki, DataDog, Dynatrace, AppDynamics, CloudWatch, StackDriver, OpenTelemetry, New Relic. To generate and track: Metrics, Logging, Application Tracing).

If you’re excited about this job opportunity but your background doesn’t match exactly the requirements in the job description, we strongly encourage you to apply anyway. You may be just the right candidate for this or other positions we have.

At Ebury Bank we value diversity in all its forms and are committed to creating an inclusive environment. All of our vacancies are open and eligible for people with disabilities.