DevOps Engineer

Dlocal LLP; Madrid; On-site; EUR 70,000 - 95,000; Full time

Job summary

dLocal is seeking a DevOps Engineer to join the Cloud Platform team in Madrid. You will build and run AWS infrastructure and production Kubernetes platforms, while ensuring security, reliability and cost efficiency.

You will work with software engineers, Security and Compliance to implement Gateway API-based traffic management, service mesh capabilities, and multi-region DR plans. The role emphasizes AI-assisted tooling, automation, and on-call incident response.

Qualifications

• Hands-on production AWS infrastructure experience including compute, networking and IAM.
• Kubernetes operations beyond deployment; cluster management and troubleshooting.
• Experience with Gateway API, service meshes, and traffic management.
• Strong Terraform and Git-based practices, including module design and state management.
• Solid Linux networking knowledge and debugging across infra and apps.
• Familiar with GitOps tools and packaging with Argo CD, Flux, Helm or Kustomize.
• Experience with multi-region DR, backups, restores and failover testing.
• Ability to explain AI-assisted infra workflows and data handling considerations.

Responsibilities

• Build and operate AWS infrastructure and production Kubernetes platforms.
• Implement Gateway API-based traffic management and service mesh capabilities.
• Develop reusable Terraform modules and automate infrastructure delivery.
• Design and exercise multi-region DR plans and failover tests.
• Apply approved AI-assisted tools to IaC and script development, review and tests.
• Participate in on-call rotation, incident response, and post-incident reviews.

Skills

AWS infrastructure

Kubernetes operations

Terraform

Service mesh (Gateway API)

Linux networking

GitOps tooling (Argo CD/Flux)

Tools

Envoy Gateway

Istio

Linkerd

Cilium

Argo CD

Flux

Helm

Kustomize

Job description

We are looking for a DevOps Engineer to join dLocal’s Cloud Platform team and help evolve the infrastructure behind our mission-critical services.

You will partner with software engineers, Security, and Compliance to deliver reliable, secure, and scalable platforms. We value strong technical fundamentals and responsible use of AI-assisted tools, with ownership of every change and operational decision.

What will I be doing?

• Build and operate AWS infrastructure and production Kubernetes platforms, managing capacity, lifecycle, autoscaling, and multi-region availability while balancing performance, security, and cost.
• Implement Gateway API-based traffic management and service mesh capabilities, including gateway and route configuration, mTLS, traffic policies, observability, and controlled rollouts. Troubleshoot connectivity and performance across entry points, workloads, proxies, and networks.
• Develop reusable Terraform modules and infrastructure automation using version control, peer review, testing, and safe deployment and rollback practices.
• Help design, implement, and exercise multi-region disaster recovery plans (DRP). Translate agreed recovery time and recovery point objectives (RTO/RPO) into recovery procedures, validate restores, test regional failover and failback, and track remediation actions.
• Apply approved AI-assisted tools to IaC and script development and review, upgrade planning, configuration drift investigations, analysis of sanitized operational evidence, troubleshooting hypotheses, and improvements to tests and runbooks.
• Participate in the infrastructure on-call rotation, respond to incidents, contribute to post-incident reviews, and automate improvements that reduce operational toil.

What skills do I need?

• Hands-on experience with production AWS infrastructure, including compute, networking, storage, IAM, and load balancing.
• Production Kubernetes experience beyond application deployment, covering cluster operations, scheduling, security, and troubleshooting.
• Practical experience with Kubernetes traffic management, Gateway API, and a service mesh implementation. Comparable ingress/proxy experience combined with hands-on Gateway API work is also relevant.
• Strong Terraform and Git-based engineering practices, including module design, state management, change review, and safe infrastructure delivery.
• Strong Linux and networking fundamentals, including DNS, TCP/IP, HTTP, TLS, routing, and systematic troubleshooting across infrastructure and application boundaries.
• Practical experience with high availability and disaster recovery, including backups, restores, recovery runbooks, and testing against RTO/RPO. Understand regional failure scenarios and the distinction between high availability and disaster recovery.
• Demonstrable AI-assisted infrastructure work. Be ready to explain a real workflow, how you validated the output, where the tool was wrong or unhelpful, and how you protected sensitive data and production systems.
• Understanding of cloud security fundamentals, including least privilege, secrets management, encryption, network controls, and secure change management.
• Clear communication, ownership, and effective collaboration with distributed engineering teams during planned work and incidents.

What would make you stand out?

• Proven delivery of multi-region recovery exercises, with dependency mapping and measured recovery results.
• Advanced experience with Gateway API controllers or service meshes, including upgrades, migrations, policy enforcement, and operational trade-offs. Examples include Envoy Gateway, Istio, Linkerd, and Cilium; expertise in every product is not required.
• Experience with GitOps and Kubernetes packaging tools such as Argo CD, Flux, Helm, or Kustomize.
• Experience building reusable AI-assisted workflows or integrations with bounded permissions, auditability, evaluation, and human approval controls.
• Experience with SLOs, error budgets, resilience testing, capacity planning, performance tuning, and cloud cost optimization.
• Experience supporting payments, financial services, or other regulated, availability-sensitive environments.