Staff Platform Engineer

São Paulo  Office - Hybrid: 4 days in the office, 1 day working from home

Ebury is a Global FinTech: we apply new technologies to enhance and automate financial services and processes. This allows small and medium-sized businesses to trade and transact internationally by eliminating boundaries related to more traditional.

Are you ready to be an Eburian?

As a digital international payments platform, we are constantly challenged to change levels of quality, security and usability. That's why we look for innovative and critical employees who care about the results and impact of our products on society. Our business is growing at an impressive speed and our team needs new employees to make a difference on this journey.
We are always connected to the latest in the world of technology and software engineering. We trust our platforms to a variety of cutting-edge technologies and engineering methods that help us innovate at all times. We value professionals who seek constant learning without restricting their knowledge to a single technology.

We are looking for a Staff Platform Engineer that is in line with the technological stack we use. If you don't have full adherence, don't worry, we like the diversity of knowledge and you can certainly learn a lot from our team. 
As part of the team, you will be responsible for helping to build an Engineering Platform aligned with the guidelines of our global team at Ebury.

How we work today:

• Product-oriented multidisciplinary teams.
• Multidisciplinary teams focused on products.
• Agile methodology.
• Scalable architecture oriented towards microservices.
• Microservices written in GoLang, Python, Kotlin, Node.js, and React.
• High processing capacity with intercommunication using GRPC/Kafka.
• Continuous integration and deployment in Google Cloud (GCP).
• Automation using GIT, Jenkins, Spinnaker, Ansible, and Terraform.
• Data persistence in DataStore.
• Monitoring based on "observability" techniques using Prometheus.
• Immutable infrastructure with containers managed via Kubernetes.

Responsibilities of the Staff Platform Engineering Role:

• Discuss and help define service owners created in GCP (Google Cloud) for the business through a RACI Matrix.
• Define and create centralized access management controls for resources created by teams in GCP (Google Cloud).
• Implement a robust integration and shutdown process with the integration of access request and approval workflows through automations in JIRA.
• Implement periodic user access review procedures and IAM roles and permissions using insights from GCP Access Recommender to ensure integrity, governance, and security of access.
• Help define and deploy a standardized baseline for creating new projects to avoid the recurring proliferation of non-standard projects within the company.
• Develop standardized guidelines for creating new projects, covering naming conventions, resource allocations, and configurations.
• Introduce a comprehensive RBAC system within GCP, ensuring that users and service accounts receive permissions strictly based on their roles and responsibilities following the Principle of Least Privilege (PoLP).

On Security:

• Help establish management policies and procedures for creating, issuing, and deactivating access keys (Credentials).
• Create and maintain an updated inventory of all existing keys with description, ownership, and classification/criticality.
• Design and implement monitoring controls for access to keys and their related functions.
• A plan for regularly rotating keys and service account credentials.
• Implement version control and access for service account keys - fine-grained control.
• Governance and creation of guardrails for platform self-service automation;
• Governance and creation of "Golden Paths" automation for engineering teams;
• Governance and creation of observability for resources created through the engineering platform.

Requirements and Qualifications:

• Advanced English. Spanish is a plus.
• Analytical, resilient, and multitasking profile.
• Management capability.
• Experience facilitating the adoption of IT standards and processes.
• Advanced knowledge of OS (Linux).
• Aptitude for scripting programming and IaC (Infrastructure as Code).
• Knowledge in Networking (TCP/IP, Firewall, DNS, Routing, etc.).
• Cloud Platform operation in GCP (e.g., Function, Cloud SQL, Buckets, GKE, Firestore, VPC, Cloud DNS, IAM, Instances) and/or AWS (e.g., S3, RDS, EC2, ECS, Lambda, EKS, DynamoDB, IAM, CloudFront, VPC, R53).
• Knowledge of CI/CD (Tools such as: GitLab CI, Github Actions, Jenkins, ArgoCD, Spinnaker. Practices: Build, test, push, deploy stages).
• Orchestration of plugins and addons (K8S, EKS, GKE, Kops, Kubespray, Rancher, Helm, Nginx Ingress Controller or equivalent).
• Knowledge of Observability using tools such as: (Prometheus, Grafana, Jaeger, AlertManager, Kiali, ELK Stack, Loki, DataDog, Dynatrace, AppDynamics, CloudWatch, StackDriver, OpenTelemetry, New Relic. To generate and track: Metrics, Logging, Application Tracing).

 #LI-JM1