• Design, build, and scale Kubernetes infrastructure for secure, multi-tenant, high-availability applications. • Build and operate AI tooling infrastructure — stand up MCP servers and establish secure, governed AI access and guardrails for production systems. • Optimize and maintain CI/CD pipelines, improving reliability, speed, and rollback safety. • Implement progressive delivery strategies such as blue/green and canary deployments. • Advance Infrastructure as Code with Terraform, Helm, and Argo CD, defining reusable patterns for the org. • Operate and optimize streaming and analytics infrastructure: Kafka, Flink, and ClickHouse. • Build automated testing into the CI/CD lifecycle. • Improve system observability — define SLOs, alerts, and dashboards. • Lead incident response and postmortems, focusing on root cause and durable fixes. • Mentor engineers across teams on Kubernetes, CI/CD, and cloud infrastructure.

• Performing day-to-day operational/DevOps tasks on Wikimedia’s public facing infrastructure (deployment, maintenance, configuration, troubleshooting) • Implementing and utilizing configuration management and deployment tools (Puppet, Kubernetes) • Leading continuous improvement, by automating the installation, configuration and maintenance of services on our platform • Working closely with product teams helping them bring scalable functionality to our users by assisting in the architectural design of new services and making them operate at scale • Participating in a 24/7 on-call rotation shared across the broader SRE team. This includes taking part in incident response, diagnosis and follow-up on system outages or alerts across Wikimedia’s production infrastructure. • Collaborating with a global, cross-functional team in an asynchronous communication environment • Mentoring peers in your areas of technical and operational strength

• Secure, manage, and scale Overflow’s cloud environment, implementing least-privilege IAM policies, network security (VPCs, WAFs, Security Groups), and robust secret management. • Refine existing infrastructure provisioning using Infrastructure as Code (IaC) tools, ensuring security best practices. • Deploy and manage comprehensive observability, logging, and alerting frameworks to detect performance bottlenecks, anomalous behavior, or potential security incidents. • Own and optimize our continuous integration and deployment (CI/CD) pipelines. • "Shift Left" by integrating automated security testing (SAST, DAST, dependency scanning, container scanning) directly into the developer workflow. • Act as a security champion, partnering with software engineers to perform threat modeling, architectural reviews, and secure coding training. • Action on compliance requirements (SOC 2, PCI-DSS, and data privacy regulations) • Partner with our legal and operations teams to streamline security audits, penetration testing, and vendor risk assessments. • Ensure that PII and sensitive financial data are properly encrypted at rest and in transit across all databases and caching layers.

• Gerenciar e otimizar ambientes AWS, garantindo disponibilidade, desempenho, escalabilidade e segurança; • Implementar e evoluir pipelines de CI/CD com integração de testes automatizados e práticas de DevSecOps; • Desenvolver automações e scripts utilizando Python, Go ou tecnologias similares; • Implementar Infraestrutura como Código (IaC) utilizando Terraform e AWS CloudFormation; • Apoiar a adoção de GitOps com ferramentas como ArgoCD e Flux; • Monitorar, diagnosticar e solucionar problemas complexos de infraestrutura, redes e segurança; • Garantir aderência a padrões de segurança e conformidade, incluindo LGPD e ISO 27001; • Atuar em conjunto com times de Engenharia promovendo cultura ágil, colaboração e melhoria contínua; • Implementar práticas de observabilidade utilizando métricas, logs, tracing e alertas; • Definir e monitorar indicadores de disponibilidade e confiabilidade (SLA, SLO e SLI); • Implementar estratégias de mitigação de incidentes, incluindo Chaos Engineering e Fault Injection Simulation (FIS); • Apoiar iniciativas de FinOps, atuando na otimização de custos em nuvem através de tagging, orçamento e acompanhamento de consumo; • Contribuir para a segurança dos pipelines utilizando ferramentas como SonarQube, Snyk e Trivy.