Cloud Platform Engineer at Opsbrasil

We are looking for a Senior Cloud Platform Engineer to join our team on a remote, contract basis. Our organization specializes in complex enterprise migrations, and this role is central to our infrastructure and automation efforts. You will be responsible for building and extending AWS landing zones, managing account vending, and overseeing networking for a large-scale migration program. This initiative involves moving 191 applications across 20 business departments, requiring you to map 27 Azure subscriptions and 451 resource groups into a new AWS account structure. You will support five distinct migration waves, each with its own cutover windows and rollback plans, while ensuring our landing zone architecture remains robust and scalable.

Key outcomes

• Develop and maintain multi-account AWS landing zones using Control Tower, account vending, and service control policies.
• Design and deploy hybrid networking solutions, including VPC architecture, Transit Gateway, Direct Connect, and VPN connections to on-premises and Azure environments.
• Author and manage Terraform modules that serve as the foundation for our engineering team.
• Automate delivery pipelines using tools like GitHub Actions, GitLab CI, or CodePipeline.
• Manage containerized workloads on EKS using Helm and Argo CD.
• Create comprehensive runbooks and lead knowledge transfer sessions to ensure client engineering teams are set up for long-term success.

Requirements

• Extensive production experience in writing and maintaining Terraform modules at scale.
• Advanced knowledge of AWS networking, specifically VPC design, routing, Transit Gateway, and hybrid connectivity.
• Deep technical expertise in the AWS platform, including compute, storage, and IAM, supported by an AWS Solutions Architect Associate certification or higher.
• Proficiency in Linux environments, with the ability to script effectively in Bash and Python.
• Proven experience with CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or CodePipeline.
• Demonstrated history of building or operating multi-account AWS landing zones.
• Professional proficiency in written and spoken English.

Preferred qualifications

• Experience with AWS Control Tower, Terragrunt, and Ansible.
• Knowledge of Kubernetes, EKS, Helm, and Argo CD.
• Familiarity with Azure, VMware, and Serverless technologies like Lambda.
• Understanding of security frameworks and tools, including GuardDuty, Security Hub, and PCI-DSS environments.
• AWS DevOps Professional certification.

Compensation

This is a full-time contract position starting in February 2027. We offer the flexibility of remote work and are open to candidates located anywhere in LATAM.

How to apply

If you are interested in this opportunity and meet the requirements, please submit your application for our review. We look forward to hearing from you.