Senior DevSecOps Engineer (AWS, Kubernetes, São Paulo)

About the role

1GLOBAL, a global mobile communications provider founded in 2022, is hiring a Senior DevSecOps / Cloud Security Engineer for its Technology department, based in São Paulo with a hybrid workplace. The role strengthens and automates security across cloud and hybrid infrastructure, embedding security from design through deployment.

Key responsibilities

• Design, implement and evolve scalable cloud security controls in AWS multi-account environments using security-as-code principles
• Own Kubernetes security architecture, including workload isolation, RBAC, pod security standards and network segmentation
• Embed security automation in CI/CD pipelines, including image scanning, IaC validation and policy enforcement
• Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations and emerging threats
• Design and maintain IAM and secrets management practices with least-privilege access
• Partner with DevOps, Platform and IP/Network teams to deliver security controls as code and by design
• Analyze network traffic and security telemetry using flow logs, metrics and targeted packet inspection
• Align with internal policies and external frameworks such as CIS, NIST and ISO 27001, and maintain security documentation and runbooks
• Act as a security champion, promoting best practices and secure engineering culture

Required profile

• Minimum of 3+ years in cloud security, DevSecOps or infrastructure security
• Experience with vulnerability management and container security
• Security-first mindset with strong troubleshooting skills

Required skills

• AWS security fundamentals (IAM, KMS, GuardDuty, Config, Security Hub)
• Solid Linux security and cloud networking fundamentals
• Kubernetes security (RBAC, NetworkPolicies, pod security, image scanning)
• Infrastructure as Code (Terraform) and Git-based workflows
• Scripting for automation (Python, Go or Bash)
• WAFs and cloud DDoS protection; packet inspection tools such as tcpdump, Wireshark and Suricata

What we offer

• CLT contract with stable employment and reliable benefits
• Quarterly performance bonuses
• Meal allowance of R$100 per working day paid into a Caju card
• Extended parental leave: 180 days maternity and 20 days paternity
• Health insurance with SulAmérica, 50% covered by the company
• Daycare allowance of R$500 per month per child for mothers with children under 3
• Career growth, professional development and opportunities to work in other 1GLOBAL offices worldwide