We are a 100% Brazilian consulting company. We started in 2018 to transform IT outsourcing in Portugal. Our consultants are our greatest asset, and we work to ensure they feel motivated, supported, and valued every day.

A professional responsible for accelerating and making software delivery reliable by bringing together development, operations, security, and quality teams. Their goal is to create automated, traceable, secure, and repeatable delivery processes, from development to production operation, also providing support for infrastructure management through Infrastructure as Code (IaC) practices and automation.

Key skills

Implementation and maintenance of CI/CD practices.

Automation of builds, tests, security validations, releases, and deployments.

Support for infrastructure management through code and declarative configuration.

Knowledge of containers and Kubernetes, including application deployment and configuration tools.

Monitoring, observability, incident management, and continuous reliability improvement.

Integrating security into the development lifecycle, based on DevSecOps principles.

Version control, code quality, and branching strategies.

Knowledge of networks, Linux systems, cloud computing, and scripting.

Ability to create self-service patterns, templates, and platforms for development teams.

Responsibilities

Create, maintain, and evolve CI/CD pipelines for applications, infrastructure, and configurations.

Automate builds, unit tests, integration tests, code quality checks, dependency analysis, and security scans.

Implement deployment strategies, including rolling updates, blue/green, canary, and automatic rollback.

Manage code repositories, branching policies, pull requests, versioning, and artifact management.

Create and maintain reusable pipeline templates, IaC modules, and deployment patterns.

To support the operation and maintenance of Kubernetes clusters, container platforms, and associated services.

Implement end-to-end observability: metrics, logs, traces, dashboards, and alerts.

To support incident response, root cause analysis, and the creation of preventive actions.

Integrate security tools into the delivery cycle: SAST, DAST, vulnerability management, secrets scanning, and SBOM.

To ensure segregation of environments, access control, management of secrets, and auditability of deployments.

Collaborate with Cloud Engineers, development, security, and operations teams to improve the delivery platform.

Tools and technologies to be mastered

CI/CD and code management

Azure DevOps Pipelines, GitHub Actions, GitLab CI/CD or Jenkins.

Git, GitFlow, or stem-based development.

Azure Repos, GitHub or GitLab.

Azure artifacts, GitHub packages, GitLab package registry, Nexus, or JFrog Artifactory.

Containers and orchestration

Docker and Docker Compose.

Kubernetes.

Helm and Kustomize.

Argo CD or Flux CD for GitOps.

GKE, AKS and/or EKS, depending on the platform adopted.

Infrastructure as Code and configuration

Terraform / OpenTofu.

Ansible.

Packer, when needed for creating images.

Kubernetes helm charts and manifests.

YAML, JSON, HCL and declarative script.

Observability and operation

Prometheus and Grafana.

Elastic Stack / OpenSearch.

Loki, Tempo, and OpenTelemetry.

Datadog, Dynatrace, New Relic, or corporate alternatives.

PagerDuty, Opsgenie, or incident management tools.

Safety and quality

SonarQube.

Snyk, Trivy, Dependabot or Renovate.

Checkov, tfsec, or AI-a-C analysis tools.

OWASP ZAP and DAST tools.

HashiCorp Vault, Azure Key Vault, Google Secret Manager or AWS Secrets Manager.

Certificate and PKI management, for example cert-manager.

Scripting and systems

Linux, Bash, and Python.

PowerShell, especially in Microsoft ecosystems.

Fundamental knowledge of TCP/IP, DNS, HTTP/S, TLS, proxies, load balancing, and firewalls.