DevSecOps Software Architect - GCP - On-site São Paulo

Why join Ibrowse?

At Ibrowse, technology is made by people. For over 27 years, we have been transforming companies and lives through technology, innovation, agility, and collaboration, always valuing those who are part of our story. We believe in an environment where respect, learning, and evolution go hand in hand, guided by our core value: being open to the new, to ideas, and to people.

Diversity and inclusion are commitments we take seriously. We are dedicated to creating and strengthening a welcoming and respectful work environment. We seek professionals regardless of gender, ethnicity, religion, age, or disability, because we believe that diverse teams drive innovation and promote a plurality of ideas and perspectives.

If you are looking for challenges, growth, and a place where you can be yourself, come build the future of technology with us. 🧡

RESPONSIBILITIES AND DUTIES

• Architecture & Cloud: Design, implement, and evolve the DevSecOps architecture and infrastructure on GCP with a focus on Security by Design.
• Secure Pipelines: Design, deploy, and maintain secure CI/CD pipelines (secure pipelines) with integrations for SAST, DAST, SCA, and vulnerability scanning.
• Automation & IaC: Define and maintain Infrastructure as Code strategies (Terraform and/or Ansible) with embedded security controls.
• Container Management: Orchestrate Docker and Kubernetes/GKE environments focusing on hardening, network policies, RBAC, and image security.
• Secrets & IAM Management: Implement and evolve secrets management, keys/credentials (Cloud KMS, Secret Manager), and IAM policies.
• Observability & SIEM: Evolve security monitoring practices, threat detection, tracing, and logging for applications and infrastructure.
• Technical Support & Review: Guide developers/vendors and review GCP architectures regarding risks, security, performance, and scalability.
• Risk & Incident Management: Support risk assessment, security incident response, and the definition of critical controls alongside Information Security.
• Governance & Compliance: Ensure compliance with UTC architecture/security guidelines and the Technical Guidelines Manual.
• DevSecOps Culture: Disseminate culture and technical knowledge in information security, accelerating the evolution of internal teams and partners.

REQUIREMENTS AND QUALIFICATIONS

• Completed degree in IT, or a degree in any field accompanied by a postgraduate degree (specialization, master's, or doctorate) in IT with a minimum of 360 hours.
• Proven experience as a DevSecOps Architect, Cloud Security Engineer, or Cloud Infrastructure Architect focused on security.
• Advanced knowledge in IAM, VPC/VPC Service Controls, Cloud KMS, Security Command Center, GKE, Cloud Build, and Cloud Monitoring/Logging.
• Expertise in secure pipelines (Cloud Build, GitLab CI, Jenkins, Azure DevOps), SAST/DAST/SCA (SonarQube), IaC (Terraform, Ansible), Docker, and Kubernetes/GKE (hardening).
• Knowledge of secrets management, cryptography, access controls, secure development, and standards/best practices (OWASP, CIS Benchmarks, LGPD).
• Expertise in code versioning (Git) and agile methodologies (Scrum, Kanban).
• Systems thinking, ability to translate business requirements into scalable/secure architectures, mentoring skills, and ease in documenting and transferring knowledge.
• Desired Skills: GCP Certifications (Professional Cloud Security Engineer / Professional Cloud Architect) or Security certifications (CISSP, CompTIA Security+); experience with hybrid/multi-cloud architecture (GCP/Azure), messaging (Pub/Sub, Kafka), pentesting/incident response, and security governance in AI/Data.

ADDITIONAL INFORMATION

• Employment Type: CLT (Brazilian Labor Law)
• Work Mode: On-site - São Paulo
• Work Hours: 200 hours (monthly)
• Benefits: Meal Voucher (VR).
• Partnership for English courses
• Partnership for IT courses