Senior Engineer - Platform Engineering

São Paulo Office - Hybrid: 4 days in the office, 1 day working from home

Ebury is a Global FinTech: we apply new technologies to enhance and automate financial services and processes. This allows small and medium-sized businesses to trade and transact internationally by eliminating boundaries related to more traditional.

Are you ready to be an Eburian?

As a digital international payments platform, we are constantly challenged to change levels of quality, security and usability. That's why we look for innovative and critical employees who care about the results and impact of our products on society. Our business is growing at an impressive speed and our team needs new employees to make a difference on this journey.

We are always connected to the latest in the world of technology and software engineering. We trust our platforms to a variety of cutting-edge technologies and engineering methods that help us innovate at all times. We value professionals who seek constant learning without restricting their knowledge to a single technology.

We are looking for a Senior Platform Engineer that is in line with the technological stack we use. If you don't have full adherence, don't worry, we like the diversity of knowledge and you can certainly learn a lot from our team.

As part of the team, you will be responsible for helping to build an Engineering Platform aligned with the guidelines of our global team at Ebury.

How we work today:

• Product-oriented multidisciplinary teams.
• Multidisciplinary teams focused on products.
• Agile methodology.
• Scalable architecture oriented towards microservices.
• Microservices written in GoLang, Python, Kotlin, Node.js, and React.
• High processing capacity with intercommunication using GRPC/Kafka.
• Continuous integration and deployment in Google Cloud (GCP).
• Automation using GIT, Jenkins, Spinnaker, Ansible, and Terraform.
• Data persistence in DataStore.
• Monitoring based on "observability" techniques using Prometheus.
• Immutable infrastructure with containers managed via Kubernetes.

Responsibilities of the Senior Platform Engineering Role:

• Discuss and help define service owners created in GCP (Google Cloud) for the business through a RACI Matrix.
• Define and create centralized access management controls for resources created by teams in GCP (Google Cloud).
• Implement a robust integration and shutdown process with the integration of access request and approval workflows through automations in JIRA.
• Help define and deploy a standardized baseline for creating new projects to avoid the recurring proliferation of non-standard projects within the company.
• Develop standardized guidelines for creating new projects, covering naming conventions, resource allocations, and configurations.

On Security:

• Design and implement monitoring controls for access to keys and their related functions.
• Introduce a comprehensive RBAC system within GCP, ensuring that users and service accounts receive permissions strictly based on their roles and responsibilities following the Principle of Least Privilege (PoLP).
• Governance and creation of guardrails for platform self-service automation;
• Governance and creation of "Golden Paths" automation for engineering teams;
• Governance and creation of observability for resources created through the engineering platform.

Requirements and Qualifications:

• Advanced English. Spanish is a plus.
• Analytical, resilient, and multitasking profile.
• Management capability.
• Experience facilitating the adoption of IT standards and processes.
• Advanced knowledge of OS (Linux).
• Aptitude for scripting programming and IaC (Infrastructure as Code).
• Knowledge in Networking (TCP/IP, Firewall, DNS, Routing, etc.).
• Cloud Platform operation in GCP (e.g., Function, Cloud SQL, Buckets, GKE, Firestore, VPC, Cloud DNS, IAM, Instances) and/or AWS (e.g., S3, RDS, EC2, ECS, Lambda, EKS, DynamoDB, IAM, CloudFront, VPC, R53).
• Knowledge of CI/CD (Tools such as: GitHub, Github Actions, Jenkins, ArgoCD. Practices: Build, test, push, deploy stages).
• Orchestration of plugins and addons (K8S, EKS, GKE, Kops, Kubespray, Rancher, Helm, Nginx Ingress Controller or equivalent).
• Knowledge of Observability using tools such as: (Prometheus, Grafana, Jaeger, AlertManager, Kiali, ELK Stack, Loki, DataDog, Dynatrace, AppDynamics, CloudWatch, StackDriver, OpenTelemetry, New Relic. To generate and track: Metrics, Logging, Application Tracing).