Senior DevOps Engineer

About the Role

We are looking for a Senior DevOps Engineer to maintain, optimize, and continuously improve the CI/CD platform, infrastructure-as-code, and operational practices for a mature, stable multi-environment AWS ecosystem. The solution is fully developed and in production; the focus is on continuous improvement, cost optimization, reliability, and operational excellence. Additionally, the project is undergoing an AI-First transformation, adopting AWS Kiro and custom AI agents to implement an AI-driven Development Lifecycle (AI-DLC). You will work closely with development squads to ensure fast, reliable, and secure delivery of enhancements and fixes.

About the Role

We are looking for a Senior DevOps Engineer to maintain, optimize, and continuously improve the CI/CD platform, infrastructure-as-code, and operational practices for a mature, stable multi-environment AWS ecosystem. The solution is fully developed and in production; the focus is on continuous improvement, cost optimization, reliability, and operational excellence. Additionally, the project is undergoing an AI-First transformation, adopting AWS Kiro and custom AI agents to implement an AI-driven Development Lifecycle (AI-DLC). You will work closely with development squads to ensure fast, reliable, and secure delivery of enhancements and fixes.

Key Responsibilities

Maintain and evolve CI/CD pipelines (AWS CodeBuild, CodePipeline) ensuring reliability and speed of delivery

Maintain and improve Infrastructure as Code using AWS CDK (Python primarily, some TypeScript) across multiple AWS accounts

Optimize serverless infrastructure performance, cost, and reliability (Lambda, API Gateway, AppSync, Step Functions, EventBridge)

Improve and extend observability solutions (CloudWatch, OpenSearch dashboards, structured logging, alerting)

Continuously strengthen security posture including IAM policies, KMS encryption, Secrets Manager, and network segmentation

Maintain and tune data infrastructure components (RDS PostgreSQL, ElastiCache Redis, DynamoDB, S3)

Review and improve disaster recovery strategies, backup automation, and rollback mechanisms

Support multi-account governance and cross-account resource management

Collaborate with development teams on deployment strategies (blue/green, canary, feature flags)

Drive operational excellence through runbooks, incident response procedures, and post-mortem processes

Apply FinOps practices to monitor, optimize, and report on cloud cost and resource utilization

Identify and implement continuous improvement initiatives across infrastructure, pipelines, and operational processes

Contribute to the AI-First transformation by integrating AI agents and AI-assisted workflows into the development and operations lifecycle

Troubleshoot production issues and perform root cause analysis

Mentor junior team members on cloud infrastructure and DevOps practices

Key Challenges

Sovereign Cloud: reduce footprint on vendor lock-in AWS solutions and migrate workloads toward containers and cloud-native standard technologies

Migration and Modernization: plan and execute application and workload migration to AWS through 2029

Propose improvements and new solutions at the weekly architecture board for cost reduction, operational improvements, and adoption of new AWS or market features

What We Offer

Access and incentive to pursue multiple certifications (AWS, Azure, GCP, GitHub, AI, and more)

Be part of a 60+ DevOps engineering community, working across 25+ projects in different industries and countries

Collaborative environment with internal and external meet-ups, happy hours, and challenges beyond project work

Access to leading AI tools and platforms

Opportunity to work on a high-impact EU institutional project with modern serverless architecture

Active AI-First transformation with cutting-edge AI-assisted development practices

Required Technical Skills

Advanced proficiency in Amazon Web Services (AWS) - multi-account environments

Strong experience with Infrastructure as Code (AWS CDK with Python/TypeScript; CloudFormation)

CI/CD pipeline design and management (CodeBuild, CodePipeline, or equivalent)

Containerization and orchestration (Docker, ECS/Fargate)

Serverless architecture (Lambda, API Gateway, Step Functions, EventBridge)

Networking (VPC, subnets, security groups, PrivateLink, CloudFront)

Monitoring and observability (CloudWatch, OpenSearch, structured logging)

Scripting and automation (Python, Bash, PowerShell)

Database operations (PostgreSQL, Redis, DynamoDB)

Security hardening (IAM, KMS, WAF, Secrets Manager)

Maintain and enforce security and quality gates across CI/CD pipelines (OWASP Dependency Check, Prowler, SonarQube, AWS Config, ECR image scanning)

FinOps fundamentals (cost allocation, tagging strategies, resource optimization)

Desired Qualifications

5+ years of experience in DevOps/Platform Engineering roles

Experience with multi-environment deployment strategies and release management

Familiarity with Agile/Scrum delivery (Jira, Confluence)

Experience with Git workflows and branching strategies

Understanding of compliance and data sovereignty requirements (EU context)

Interest or experience in AI-assisted development tools and workflows

Strong communication skills and ability to work independently as an SME

Active participation in team discussions and problem-solving

Continuous improvement mindset with a track record of optimizing processes and reducing waste

Legal

Must own a valid work permit or EU/Schengen Space Nationality to legally work in Portugal

What We Offer

Health insurance;

Life Insurance and Pension Plan Programs;

Free medical services at the office (Physician, Nutritionist, Psychologist);

Wellness programs;

Flexben Program (Support for Education, Kindergarden, Training, Technology, Health);

Employee Share Purchase Plan;

Personalized training paths and access to Udemy and Plurisight Plataforms;

Flex-ability program (financial and flexible support for people with disabilities);

Special banking conditions;

Hybrid working model.

#J-18808-Ljbffr