ORAEX CLOUD CONSULTING

• Implementar e configurar monitorias utilizando Zabbix (hosts, templates, triggers, itens, discovery) • Construir dashboards e visualizações operacionais no Grafana • Atuar no troubleshooting inicial (N1), com base em alertas, eventos e métricas coletadas • Realizar análise e correlação básica de eventos para identificação de incidentes ou degradação de performance • Apoiar na sustentação do ambiente de monitoramento, garantindo disponibilidade e qualidade das monitorias • Ajustar e otimizar alertas, reduzindo falsos positivos e melhorando a assertividade das detecções • Documentar monitorias, procedimentos operacionais e padrões técnicos • Atuar em conjunto com times de infraestrutura, aplicações e banco de dados para evolução da observabilidade • Apoiar na implementação de monitorias em ambientes on-premises e cloud • Identificar e propor automações para tarefas operacionais recorrentes, como criação de hosts, geração de relatórios, gestão de alertas e integração entre ferramentas, contribuindo para a redução de esforço manual e ganho de eficiência da equipe. • Participar de revisões periódicas de alertas e runbooks operacionais, contribuir para a melhoria contínua do processo de monitoramento e observabilidade

• Develop, maintain, and enhance infrastructure automation using Terraform. • Create and manage playbooks, roles, and automation routines with Ansible. • Standardize provisioning and configuration of servers, cloud environments, and workloads. • Implement and continuously improve CI/CD pipelines. • Ensure versioning, traceability, and reuse of infrastructure code. • Support technical teams in adopting automation, DevOps best practices, and governance. • Troubleshoot automated environments, pipelines, and provisioned resources. • Contribute to security, compliance, and change-control practices in production and non-production environments. • Document processes, architectures, and automation workflows.

• Support the identification, analysis and remediation of vulnerabilities in operating systems and servers. • Execute the application of security patches in Windows, Linux and Unix environments. • Support analysis of vulnerabilities identified by security tools, contributing to prioritization based on criticality, exposure and business impact. • Contribute to the control, monitoring and reduction of the backlog of critical and high-severity vulnerabilities. • Support remediation of vulnerabilities related to hardening, outdated operating system versions, infrastructure components and base software. • Assist in the technical validation of applied fixes, ensuring the effectiveness of remediation and evidence of compliance. • Support analysis of vulnerability recurrence and propose preventive actions to reduce reoccurrence. • Monitor remediation SLAs according to criticality and client-defined policies. • Assist in the collection, consolidation and analysis of data for technical reports, operational indicators and vulnerability dashboards. • Support the gathering of technical information about clients' server estates. • Ensure activities are executed in accordance with ITIL processes (Incident, Change, Problem and Configuration Management). • Support the operational activities of the infrastructure and security team. • Support automation initiatives for operational tasks such as information collection, server inventory, patch status validation and recurring routines. • Perform critical analyses and validations of procedures in high-complexity environments with significant business risk. • Support handling of exceptions, action plans and risk register entries when immediate correction is not possible.

• Oversee governance of the vulnerability management process, ensuring prioritization, monitoring and remediation according to criticality, exposure, and business impact • Manage and control the backlog of critical and high vulnerabilities, ensuring visibility, traceability, and SLA compliance • Lead and monitor the change management process (GMUD), ensuring adherence to workflows, approved windows, and best practices • Technically validate changes related to vulnerability remediation, ensuring compliance and mitigation of operational risks • Analyze risks associated with changes, including impact assessment, rollback plans, and failure mitigation • Ensure adequate documentation, evidence, and traceability for audits • Monitor and report KPIs (remediation SLA, change success rate, vulnerability backlog) • Analyze recurring failures and propose continuous improvements to processes • Support the definition and evolution of governance policies, standards, and procedures • Serve as an interface between technical teams (infrastructure, security, and operations) and governance • Manage exceptions, accepted risks, and action plans • Ensure adherence to ITIL processes (Change, Incident, Problem Management) • Support internal and external audits • Contribute to the continuous improvement of IT governance processes

• Conduzir e apoiar auditorias internas e externas, incluindo, BACEN, SOX, PCI-DSS e ISO27001. • Gerenciar e acompanhar planos de ação para correção de não conformidades e gaps identificados. • Suportar os processos de compliance regulatório e normativo, garantindo aderência às exigências aplicáveis. • Desenvolver, revisar e manter políticas, padrões e procedimentos de segurança da informação. • Trabalhar em conjunto com diversas áreas, incluindo times técnicos e de negócios, para fortalecer os controles internos e a governança de segurança. • Ser a interface com outras entidades do grupo, inclusive em interações internacionais.

• Lead and support internal and external audits, including BACEN, SOX, PCI-DSS and ISO 27001. • Manage and track remediation action plans for identified non-conformities and gaps. • Support regulatory and compliance processes, ensuring adherence to applicable requirements. • Develop, review and maintain information security policies, standards and procedures. • Collaborate with cross-functional teams, including technical and business units, to strengthen internal controls and security governance. • Serve as the interface with other group entities, including international stakeholders.

• Analyze technical specifications to estimate work and, primarily, develop and/or optimize PL/SQL code for services provided to a financial market application; • Review architecture, component and code practices, and propose improvements for continuous evolution.