DevOps Engineer Sr. Associate

About the role

The Senior SRE / DevOps Engineer is the hands-on owner of reliability for CSBR's platforms on AWS: the Matera core-banking and payments stack, and the lending, data, and AI workloads around it. Reporting to the VP, Innovation and Tech, the Engineer runs the multi-account AWS estate, container and serverless runtimes, infrastructure as code, CI/CD, observability, and incident response, working closely with engineering, Information Security, Compliance, and Operations, and with providers such as Matera and AWS.

Core Banking & Payments (Matera)

• Operate the Matera core-banking and payments modules on AWS EKS across all environments: cluster upgrades, scaling, secrets, certificates, and the release path from vendor delivery to production.
• Lead production readiness for go-live and major releases – stress tests, failover and restore drills, runbooks, cutover and rollback plans – and act as technical counterpart to Matera for incidents and upgrades.

Application, Data & AI Workloads

• Run customer-facing credit applications on serverless AWS stacks (Lambda, API Gateway, Amplify) defined in AWS CDK.
• Operate the data lake and pipelines (S3, Iceberg, Glue, Athena, Dagster) that feed portfolio and investor reporting.
• Operate internal apps and AI workloads (agents, MCP servers) on ECS Fargate, behind Entra ID and Cognito single sign-on.

Cloud Platform & CI/CD

• Evolve the multi-account AWS organization – Control Tower, Identity Center, Transit Gateway, Network Firewall – with every change delivered through Terraform or CDK and peer review.
• Maintain the standardized GitHub Actions delivery pipeline, with promotion gates and auditable change records, and automate toil in Python and Bash.
• Keep AWS spend under control with tagging, right-sizing, and regular cost reviews.

Observability & Incident Response

• Define SLOs for payment-critical flows (Pix, boleto, disbursement, settlement) and data pipelines, with matching dashboards and alerts on CloudWatch, Prometheus, and Grafana.
• Lead on-call, incidents, and blameless postmortems, and own disaster recovery with tested RTO and RPO targets.

Security & Compliance

• Keep the estate compliant with Central Bank requirements (CMN Resolution 4,893/2021) and LGPD: remediate GuardDuty, Security Hub, and Inspector findings, and enforce least-privilege IAM and secrets management.

• Keep regulatory-reporting jobs on schedule and produce evidence for auditors and regulators.

Leadership & Special Projects

• Set reliability standards, review designs for production readiness, and mentor engineers.
• Support new credit and payment products as they launch, and other initiatives as prioritized by the VP, Innovation and Tech.

Requirements

• Native or bilingual Portuguese and professional English, equivalent to CEFR B2 or above.
• Degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.
• 8+ years in infrastructure, SRE, or DevOps, including 3+ years running production AWS workloads in financial services – banks, payment institutions, fintechs, or lenders.
• Hands-on Matera experience on Kubernetes, including vendor coordination for releases and incidents, strongly preferred.
• Deep AWS expertise (EKS, ECS, Lambda, VPC networking, IAM, KMS, RDS, S3, CloudWatch) and multi-account governance with Control Tower.
• Production Kubernetes (EKS, Helm, autoscaling), Terraform and AWS CDK, and CI/CD with GitHub Actions or GitLab CI. ArgoCD and Istio desirable.
• Observability with Prometheus, Grafana, Loki, OpenTelemetry, or Datadog, and SLO-based alerting.
• Strong Linux administration and scripting in Python and Bash.
• Knowledge of Pix and boleto, lending operations, Central Bank IT requirements (CMN Resolution 4,893/2021), and LGPD.
• Track record leading incident response and mentoring SRE or infrastructure teams, with availability for on-call.
• Desirable: taking a core-banking or payments platform to go-live; data-lake platforms (Iceberg, Athena, Dagster); LLMOps; AWS Professional, CKA, or Prometheus certifications.