DevOps Engineer

Nodi; Madrid; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

dLocal is seeking a DevOps Engineer to join the Cloud Platform team and advance the infrastructure powering our mission-critical services. You will collaborate with software engineers, Security, and Compliance to deliver reliable, secure, and scalable platforms.

You’ll own infrastructure automation, multi-region DR planning, and AI-assisted tooling usage, with a focus on performance, security, and cost balance. This hybrid role emphasizes ownership and operational excellence.

Qualifications

• Hands-on experience with production AWS infrastructure.
• Kubernetes cluster operations, scheduling, security, and troubleshooting.
• Experience with Terraform modules, state management, and safe deployment practices.
• Strong Linux networking fundamentals (DNS, TCP/IP, HTTP, TLS).
• Familiarity with service meshes and Gateway API implementations.

Responsibilities

• Build and operate AWS infrastructure and production Kubernetes platforms with autoscaling and multi-region availability.
• Implement Gateway API-based traffic management and service mesh capabilities; configure gateways, routes, mTLS, observability, and rollouts.
• Develop reusable Terraform modules and infrastructure automation with version control, peer reviews, testing, and safe deployment.
• Design, implement, and exercise multi-region disaster recovery plans; validate restores and perform failover tests.
• Apply AI-assisted tools to IaC, script development, upgrade planning, drift investigations, and runbook improvements.
• Participate in on-call rotation; respond to incidents and contribute to post-incident reviews.

Skills

AWS infrastructure

Kubernetes operations

Linux networking

Incident response

AI-assisted tooling

Tools

Terraform

Git

Gateway API

Service mesh

Kubernetes tooling (Argo CD/Flux/Helm/Kustomize)

Job description

Job Type Full-time

Seniority Level 4: Specialist / Technical Referent / Team Lead

Workplace Hybrid

Interested in this role?

What’s the opportunity?

We are looking for a DevOps Engineer to join dLocal’s Cloud Platform team and help evolve the infrastructure behind our mission-critical services.

You will partner with software engineers, Security, and Compliance to deliver reliable, secure, and scalable platforms. We value strong technical fundamentals and responsible use of AI-assisted tools, with ownership of every change and operational decision.

What will I be doing?

• Build and operate AWS infrastructure and production Kubernetes platforms, managing capacity, lifecycle, autoscaling, and multi-region availability while balancing performance, security, and cost.
• Implement Gateway API-based traffic management and service mesh capabilities, including gateway and route configuration, mTLS, traffic policies, observability, and controlled rollouts. Troubleshoot connectivity and performance across entry points, workloads, proxies, and networks.
• Develop reusable Terraform modules and infrastructure automation using version control, peer review, testing, and safe deployment and rollback practices.
• Help design, implement, and exercise multi-region disaster recovery plans (DRP). Translate agreed recovery time and recovery point objectives (RTO/RPO) into recovery procedures, validate restores, test regional failover and failback, and track remediation actions.
• Apply approved AI-assisted tools to IaC and script development and review, upgrade planning, configuration drift investigations, analysis of sanitized operational evidence, troubleshooting hypotheses, and improvements to tests and runbooks.
• Participate in the infrastructure on-call rotation, respond to incidents, contribute to post-incident reviews, and automate improvements that reduce operational toil.

What skills do I need?

• Hands-on experience with production AWS infrastructure, including compute, networking, storage, IAM, and load balancing.
• Production Kubernetes experience beyond application deployment, covering cluster operations, scheduling, security, and troubleshooting.
• Practical experience with Kubernetes traffic management, Gateway API, and a service mesh implementation. Comparable ingress/proxy experience combined with hands-on Gateway API work is also relevant.
• Strong Terraform and Git-based engineering practices, including module design, state management, change review, and safe infrastructure delivery.
• Strong Linux and networking fundamentals, including DNS, TCP/IP, HTTP, TLS, routing, and systematic troubleshooting across infrastructure and application boundaries.
• Practical experience with high availability and disaster recovery, including backups, restores, recovery runbooks, and testing against RTO/RPO. Understand regional failure scenarios and the distinction between high availability and disaster recovery.
• Demonstrable AI-assisted infrastructure work. Be ready to explain a real workflow, how you validated the output, where the tool was wrong or unhelpful, and how you protected sensitive data and production systems.
• Understanding of cloud security fundamentals, including least privilege, secrets management, encryption, network controls, and secure change management.
• Clear communication, ownership, and effective collaboration with distributed engineering teams during planned work and incidents.

What would make you stand out?

• Proven delivery of multi-region recovery exercises, with dependency mapping and measured recovery results.
• Advanced experience with Gateway API controllers or service meshes, including upgrades, migrations, policy enforcement, and operational trade-offs. Examples include Envoy Gateway, Istio, Linkerd, and Cilium; expertise in every product is not required.
• Experience with GitOps and Kubernetes packaging tools such as Argo CD, Flux, Helm, or Kustomize.
• Experience building reusable AI-assisted workflows or integrations with bounded permissions, auditability, evaluation, and human approval controls.
• Experience with SLOs, error budgets, resilience testing, capacity planning, performance tuning, and cloud cost optimization.
• Experience supporting payments, financial services, or other regulated, availability-sensitive environments.