CI&T
[Job- 31345]Senior DevOps Engineer (Cloud Network Foundation), Brazil
Remote role where the employee must remain based in a particular country.
Brazil only
From the listing details: Source listing states candidate location: "Brazil, remote"
Employer listed it 2 months ago · Added 5 weeks ago
Listed for 56 days before it closed.
This job has closed
CI&T has taken this listing down, so it is no longer accepting applications. The details below are kept for reference only.
Browse open rolesSalary
Not stated
Location
Brazil only
Timezone
Not stated
Contract
Full-time
Experience
Senior
Category
Software
The employer did not publish a salary, and we have too few comparable roles to estimate one.
What the advert says
Quoted word for word from the employer's advert. Where it says nothing, we say so.
- Working hours
- Not mentioned in the advert
- Where you can work from
You will co-own a multi-account AWS network foundation : hub and spoke on Transit Gateway, centralised inspection, controlled egress, hybrid connectivity into a client's SD-WAN estate through a third-party vendor.
- Contract
- Not mentioned in the advert
- Experience asked for
With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.
- Pay
- Not mentioned in the advert
Remote flexibility
Work from home
This is a remote role, but the employee must be based in Brazil. It is work from home rather than work from anywhere.
What the employer says
- Source listing states candidate location: "Brazil, remote"
What Nomaders makes of it
- Residency required in Brazil
- Payroll and tax are likely handled in that country only
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
Before you apply
Questions worth asking: Nomaders interpretation
- No pay is stated. Ask for the salary range before investing time in interviews.
- The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.
Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.
About the role
At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.
With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.
We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.
You will co-own a multi-account AWS network foundation : hub and spoke on Transit Gateway, centralised inspection, controlled egress, hybrid connectivity into a client's SD-WAN estate through a third-party vendor. You will be in the room when the client's cloud architect asks why a subnet is a /25 and not a /24 — and the answer has to be yours.
The work is unglamorous in the way that matters. Most of what goes wrong in a landing zone does not go wrong in a module — it goes wrong at the seams. We want someone who has been burned by those and now checks for them by reflex.
Responsabilidades:
Own the network foundation end to end : Transit Gateway with separated inspected and uninspected route tables, VPC design across inspection, egress, ingress, shared services, and workload tiers
Define and enforce the routing posture that makes traffic pass a firewall rather than merely sit near one
Verify that posture by test , not by reading your own plan
Design and implement Transit Gateway Connect over GRE with BGP , two peers for availability, ASNs agreed in advance
Extract precise inputs from third-party SD-WAN vendors who are not on your team and do not share your deadline
Manage AWS IPAM with a delegated organisation administrator, pool hierarchy mapped to accounts, RAM shares to spoke accounts
Justify every prefix — "it looked tidy" is not an answer
Implement AWS Network Firewall with stateful rule groups, default drop posture, domain allowlisting, and managed threat signatures
Be the person who knows whether an application failing to reach the internet is the firewall working correctly
Write and maintain Terraform across multiple accounts with per-phase state separation, deployed through GitHub OIDC
Implement drift detection, static validation, and a pipeline that a client can inherit
Manage log delivery into governance accounts, resource policies, KMS key policies , and service-linked roles
Understand that these accept broken configurations silently — and prove delivery by watching a log arrive
Write down why : why a prefix is what it is, why an option was rejected, what a deviation is
Prevent the next engineer from reversing a deliberate choice because nobody recorded the reasoning
Write down why : why a prefix is what it is, why an option was rejected, what a deviation is
Prevent the next engineer from reversing a deliberate choice because nobody recorded the reasoning
Requisitos:
Requirements
The employer hasn't listed requirements separately, they're described in the role summary above and on the original listing.
Benefits
No benefits package published with this listing. Ask about it at first interview.
Applying
This listing has closed, so there is no application link. The details above are kept for reference only.
Found 1mo ago. Last checked 27 Oct. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar open jobs
Browse all open rolesThis role is closed, applications are no longer accepted.