• designing and evolving cloud platforms with a focus on Azure Cloud services • leading on-premises to cloud migration initiatives • ensuring scalability, security, and high availability • implementing automated deployment pipelines and infrastructure provisioning solutions • driving platform security testing and ensuring compliance with company-wide security standards • partnering with Product, Architecture, and Software Engineering teams to deliver secure, cost-effective SaaS products • contributing to platform engineering, operations, and security research to introduce innovative solutions • supporting continuous improvement of operational processes critical for cloud platform and operations success • aligning work with company-wide OKRs and strategic initiatives focused on cloud-native transformation

• Design, develop, troubleshoot, and debug mission critical infrastructure • Manage private and public cloud infrastructures via code, designing reusable infrastructure components for scalable, highly-available, secure architectures for cloud-based applications. • Enable the continuous integration and continuous delivery of our diverse suite of software products by applying best practices for infrastructure provisioning, configuration and automated software deployments. • Continually evaluate and apply best practices to facilitate continuous improvement that can be applied across teams. • Ability to take high level requirements from senior engineers and program management and break the work down into smaller tasks for the team. • Makes process and program recommendations to the project or program. • Own entire projects or processes within a technical area. • Responsible for coaching and reviewing the work of lower-level technical staff.

• You will be Tivita's first dedicated DevSecOps, responsible for establishing the foundations of a secure, predictable, resilient, and scalable infrastructure. • Create a DevSecOps foundation that enables structured growth without hindering the development team's velocity. • Identify critical risks, define realistic priorities, and create roadmaps that balance speed, reliability, and security. • Map the attack surface and assess the current state of infrastructure and security pipelines. • Identify critical vulnerabilities, exposures of sensitive data, and inadequate access policies. • Implement IAM and least-privilege policies in cloud environments. • Validate, automate, and test backup and disaster recovery procedures. • Integrate essential security stages into CI/CD pipelines (Secrets Scan, SAST, SCA, IaC Scan) without introducing blocking gates at the outset. • Protect applications against the OWASP Top 10 using WAFs, rate limiting, and anti-bot measures. • Implement encryption at rest and in transit, and deploy DLP controls on critical interfaces. • Establish canary releases, automatic rollback, and secure deployment practices. • Build a SIEM layer and create incident response playbooks. • Review LGPD/privacy policies, onboarding/offboarding processes, and governance. • Engage the engineering team with contextualized training and security testing. • Implement the “paved road” concept to provide autonomy and reduce dependence on Infra/Sec.

• Architect with a resiliency-by-design intent, for self-healing, fault-tolerant systems, focusing on proactive readiness rather than reactive correction. • Operate within a secure high-volume, high-volatility application environment, utilizing advanced networking and compute structures, in cloud hosted environments (AWS/GCP). • Move the organization from "firefighting" to a proactive culture through habits and systems supporting feature flagging, production readiness reviews, architectural decision records, and chaos engineering. • Support the incident management practice, mentoring SREs and Software engineers alike in utilizing our monitoring and observability toolsets for effective troubleshooting. • Define SLIs, SLOs, and error budgets that balance feature velocity with platform stability, supporting a shift to service ownership. • Underscore an automation-first perspective using Terraform, CDK, and other cloud-formation infrastructure as code toolsets to ensure repeatable, audit-ready environments.