← All roles

[Job- 31345]Senior DevOps Engineer (Cloud Network Foundation), Brazil

CI&T· Infrastructure / Cloud Network Foundation
Apply on company site
RemoteHomeofficePosted 1mo ago

About the role

Senior DevOps Engineer responsible for co-owning a multi-account AWS network foundation (hub and spoke with Transit Gateway, centralised inspection, egress control, and hybrid connectivity to clients’ SD-WAN via third-party vendors). Focus on designing, enforcing, testing, and delivering robust landing zone architecture and Terraform-based pipelines across multiple accounts and phases.

Responsibilities

  • Own the network foundation end to end: Transit Gateway with separated inspected and uninspected route tables, VPC design across inspection, egress, ingress, shared services, and workload tiers
  • Define and enforce the routing posture that makes traffic pass a firewall rather than merely sit near one
  • Verify posture by test, not by reading your own plan
  • Design and implement Transit Gateway Connect over GRE with BGP, two peers for availability, ASNs agreed in advance
  • Extract precise inputs from third-party SD-WAN vendors who are not on your team and do not share your deadline
  • Manage AWS IPAM with a delegated organisation administrator, pool hierarchy mapped to accounts, RAM shares to spoke accounts
  • Justify every prefix
  • Implement AWS Network Firewall with stateful rule groups, default drop posture, domain allowlisting, and managed threat signatures
  • Be the person who knows whether an application failing to reach the internet is the firewall working correctly
  • Write and maintain Terraform across multiple accounts with per-phase state separation, deployed through GitHub OIDC
  • Implement drift detection, static validation, and a pipeline that a client can inherit
  • Manage log delivery into governance accounts, resource policies, KMS key policies, and service-linked roles
  • Understand that configurations may silently fail and prove delivery by watching a log arrive
  • Write down why: prefix choices, rejected options, deviations, and rationale to prevent revisits
  • Prevent the next engineer from reversing deliberate choices because the reasoning was not recorded
  • Write down why: why a prefix is what it is, why an option was rejected, what a deviation is
  • Prevent the next engineer from reversing a deliberate choice because nobody recorded the reasoning

Qualifications

  • Transit Gateway: association vs. propagation, appliance mode and rationale
  • VPC design: Network Firewall, NAT and egress control, PrivateLink, Route 53 Resolver
  • Hands-on with hub and spoke and centralised inspection (built it, broke it, fixed it)
  • Ability to describe routing asymmetry diagnosed or firewall proof in path
  • Organizations, Control Tower, OUs, SCPs, delegated administrators, RAM
  • Experience inheriting a landing zone previously deployed
  • Module design, state layout across accounts and phases
  • Plan-reading with awareness of renaming or destroying resources
  • Site-to-site VPN or Direct Connect, GRE, BGP peering, route advertisement, ASN allocation
  • Default to environment checks rather than trusting reports
  • Clear, precise, unhedged prose as a delivery skill
  • Advanced English required

Skills

Required:Transit GatewayVPC Designhub and spoke architectureRouting & Firewall postureAWS IAM / Organizations / Control TowerLanding Zone modernizationTerraform across multiple accounts

Benefits

  • Health and dental insurance
  • Meal and food allowance
  • Childcare assistance
  • Extended paternity leave
  • Wellhub (Gympass) TotalPass partnerships for fitness
  • Profit Sharing and Results Participation (PLR)
  • Life insurance
  • Continuous learning platform (CI&T University)
  • Discount club
  • Free online platform for well-being
  • Pregnancy and responsible parenting course
  • Partnerships with online learning platforms
  • Language learning platform
  • Many more!
Last updated Oct 21, 2026. Interested? Apply on the company site.

About CI&T

Technology Transformation Specialists

A global technology consulting and digital transformation firm that combines human expertise with AI to develop innovative solutions.

Technology transformationAISoftware developmentCloud servicesDigital experienceData analyticsApplication modernizationConsulting
Company profileWebsite

More open roles at CI&T