DevOps Engineer

Dlocal LLP; Barcelona; On-site; EUR 60,000 - 90,000; Full time

Job summary

dLocal in Barcelona is seeking a DevOps Engineer to join its Cloud Platform team to evolve infrastructure for mission-critical services. You will collaborate with software engineers, Security, and Compliance to deliver reliable, secure, and scalable platforms while embracing AI-assisted tools and responsible ownership of changes.

You will build and operate AWS infrastructure and production Kubernetes platforms, implement Gateway API-based traffic management, develop reusable Terraform modules,

Qualifications

• Hands-on experience with production AWS infrastructure, including compute, networking, storage, IAM, and load balancing.
• Production Kubernetes experience beyond application deployment, covering cluster operations, scheduling, security, and troubleshooting.
• Practical experience with Kubernetes traffic management, Gateway API, and a service mesh implementation.
• Strong Terraform and Git-based engineering practices, including module design, state management, change review, and safe infrastructure delivery.
• Strong Linux and networking fundamentals, including DNS, TCP/IP, HTTP, TLS, routing, and systematic troubleshooting across infrastructure and application boundaries.
• Practical experience with high availability and disaster recovery, including backups, restores, recovery runbooks, and testing against RTO/RPO.
• Demonstrable AI-assisted infrastructure work.
• Understanding of cloud security fundamentals, including least privilege, secrets management, encryption, network controls, and secure change management.
• Clear communication, ownership, and effective collaboration with distributed engineering teams during planned work and incidents.

Responsibilities

• Build and operate AWS infrastructure and production Kubernetes platforms, managing capacity, lifecycle, autoscaling, and multi-region availability while balancing performance, security, and cost.
• Implement Gateway API-based traffic management and service mesh capabilities, including gateway and route configuration, mTLS, traffic policies, observability, and controlled rollouts. Troubleshoot connectivity and performance across entry points, workloads, proxies, and networks.
• Develop reusable Terraform modules and infrastructure automation using version control, peer review, testing, and safe deployment and rollback practices.
• Help design, implement, and exercise multi-region disaster recovery plans (DRP). Translate agreed recovery time and recovery point objectives (RTO/RPO) into recovery procedures, validate restores, test regional failover and failback, and track remediation actions.
• Apply approved AI-assisted tools to IaC and script development and review, upgrade planning, configuration drift investigations, analysis of sanitized operational evidence, troubleshooting hypotheses, and improvements to tests and runbooks.
• Participate in the infrastructure on-call rotation, respond to incidents, contribute to post-incident reviews, and automate improvements that reduce operational toil.

Skills

AWS

Kubernetes

Gateway API

Terraform

Git

Linux networking

DNS

TCP/IP

HTTP/TLS

Disaster recovery

AI-assisted tooling

Tools

Envoy Gateway

Istio

Linkerd

Cilium

Job description

We are looking for a DevOps Engineer to join dLocal’s Cloud Platform team and help evolve the infrastructure behind our mission-critical services.

You will partner with software engineers, Security, and Compliance to deliver reliable, secure, and scalable platforms. We value strong technical fundamentals and responsible use of AI-assisted tools, with ownership of every change and operational decision.

What will I be doing?

• Build and operate AWS infrastructure and production Kubernetes platforms, managing capacity, lifecycle, autoscaling, and multi-region availability while balancing performance, security, and cost.
• Implement Gateway API-based traffic management and service mesh capabilities, including gateway and route configuration, mTLS, traffic policies, observability, and controlled rollouts. Troubleshoot connectivity and performance across entry points, workloads, proxies, and networks.
• Develop reusable Terraform modules and infrastructure automation using version control, peer review, testing, and safe deployment and rollback practices.
• Help design, implement, and exercise multi-region disaster recovery plans (DRP). Translate agreed recovery time and recovery point objectives (RTO/RPO) into recovery procedures, validate restores, test regional failover and failback, and track remediation actions.
• Apply approved AI-assisted tools to IaC and script development and review, upgrade planning, configuration drift investigations, analysis of sanitized operational evidence, troubleshooting hypotheses, and improvements to tests and runbooks.
• Participate in the infrastructure on-call rotation, respond to incidents, contribute to post-incident reviews, and automate improvements that reduce operational toil.
  

What skills do I need?

• Hands-on experience with production AWS infrastructure, including compute, networking, storage, IAM, and load balancing.
• Production Kubernetes experience beyond application deployment, covering cluster operations, scheduling, security, and troubleshooting.
• Practical experience with Kubernetes traffic management, Gateway API, and a service mesh implementation. Comparable ingress/proxy experience combined with hands-on Gateway API work is also relevant.
• Strong Terraform and Git-based engineering practices, including module design, state management, change review, and safe infrastructure delivery.
• Strong Linux and networking fundamentals, including DNS, TCP/IP, HTTP, TLS, routing, and systematic troubleshooting across infrastructure and application boundaries.
• Practical experience with high availability and disaster recovery, including backups, restores, recovery runbooks, and testing against RTO/RPO. Understand regional failure scenarios and the distinction between high availability and disaster recovery.
• Demonstrable AI-assisted infrastructure work. Be ready to explain a real workflow, how you validated the output, where the tool was wrong or unhelpful, and how you protected sensitive data and production systems.
• Understanding of cloud security fundamentals, including least privilege, secrets management, encryption, network controls, and secure change management.
• Clear communication, ownership, and effective collaboration with distributed engineering teams during planned work and incidents.
  

What would make you stand out?

• Proven delivery of multi-region recovery exercises, with dependency mapping and measured recovery results.
• Advanced experience with Gateway API controllers or service meshes, including upgrades, migrations, policy enforcement, and operational trade-offs. Examples include Envoy Gateway, Istio, Linkerd, and Cilium; expertise in every product is not required.
• Experience with GitOps and Kubernetes packaging tools such as Argo CD, Flux, Helm, or Kustomize.
• Experience building reusable AI-assisted workflows or integrations with bounded permissions, auditability, evaluation, and human approval controls.
• Experience with SLOs, error budgets, resilience testing, capacity planning, performance tuning, and cloud cost optimization.
• Experience supporting payments, financial services, or other regulated, availability-sensitive environments.