• Implement and maintain SAST, DAST and SCA tools in the CI/CD pipeline (Bitbucket/GitHub/GitLab) • Implement, maintain, operate and evolve the Secrets Manager and Vault • Perform continuous secret scanning in repositories and drive remediation of findings with development teams • Conduct security-focused code reviews on critical features — authentication, authorization, external integrations, handling of sensitive data • Harden infrastructure: Terraform state, IAM policies, AWS configurations, Security Groups • Support remediation of technical findings collected from security analysis tools, external pentests and internal scans • Build and lead the Security Champions program — identify focal points within dev squads and structure ongoing training • Conduct threat modeling for new features and critical integrations with product and engineering teams • Define and document security requirements in the SDLC — from design to deployment • Assess the security of internal and external APIs, partner integrations and authentication flows

• Atuar como referência técnica de SRE/Infraestrutura Cloud dentro dos times/clientes internos atendidos • Realizar diagnóstico de ambientes cloud (GCP/AWS) identificando oportunidades de otimização técnica e financeira • Propor e implementar ações de FinOps: rightsizing, otimização de recursos, controle e redução de custos • Manter e evoluir pipelines de CI/CD • Gerenciar infraestrutura como código (Terraform) • Garantir disponibilidade, escalabilidade e performance de ambientes em produção • Apoiar migrações de ambientes cloud (ex: AWS ↔ GCP) • Administrar e otimizar clusters Kubernetes • Implementar monitoramento e observabilidade (Prometheus, Grafana, DataDog, Cloud Logging etc.) • Atuar de forma consultiva, comunicando-se diretamente com stakeholders técnicos e de negócio

• Independently lead infrastructure-as-code development using Terraform and scripting languages such as Python and PowerShell to support scalable and reliable deployments. • Manage Linux/Kubernetes cluster environments. • Deploy solutions in accordance with Change Management Processes. • Support development teams on API integration strategy and standards development. • Ensure systems are secure against cybersecurity threats. • Identify technical problems and develop software updates and fixes. • Strong Splunk skills for administration, query optimization, alerting, and dashboard development. • Build tools to reduce errors and improve customer experience. • Propose ideas and solutions within the Infrastructure Department to reduce workload through automation. • Design, implement, and optimize CI/CD pipelines for faster and more reliable software releases. • Independently conduct root cause analysis and implement corrective actions. • Design and write tests to investigate infrastructure failure and scaling. • Create and maintain response playbooks across incident management and monitoring tools. • Develop automation to ensure repeatability, eliminate toil, and reduce time to action and repair services. • Analyze key operational metrics to identify opportunities to improve availability. • Implement effective monitoring, alerting, and reduction of alert fatigue. • Manage container orchestration environments and optimize deployment workflows to enhance scalability, reliability, and operational efficiency. • Design, build, and manage containerized environments using Docker. • Create and maintain SLIs, SLOs, and error budgets. • Design and optimize monitoring dashboards and alerting systems to proactively detect and address application performance and uptime issues. • Implement code branching strategies using GitHub functions. • Advanced Terraform syntax and GitLab CI/CD configuration, pipelines, jobs. • Provisioning and setting up metrics in Prometheus, Thanos, and Grafana, creating and managing alerts. • Implement cloud engineering standards, reusable modules, and platform patterns in Microsoft Azure. • Operate shared cloud platform services according to Cloud Engineering defined architectures. • Ensure infrastructure changes comply with reliability, security, and cost controls established by Cloud Engineering. • Maintain operational documentation and runbooks for cloud platform services.

• Own and operate CI/CD pipelines and blue/green/canary deployment frameworks across Production, Staging, and Sandbox EKS clusters • Build and enforce policy-as-code guardrails: automated compliance checks against NIST 800-53, TRM, and VA-specific controls before production deployment • Manage Terraform IaC for all VAEC infrastructure provisioning; ensure all changes are code-reviewed and version-controlled • Lead SRE functions: define SLIs, track SLOs against PWS SLA tiers, manage error budgets, and own reliability reviews • Operate the Istio service mesh: traffic management, mTLS enforcement, and sidecar lifecycle across all EKS namespaces • Lead SAST, DAST, container scanning, and Fortify remediation — maintaining ATO with zero unmitigated critical CVEs • Maintain the onboarding pipeline: IaC-driven runbook bringing new engineers to readiness within contractual timeframes • Support Optional Task surge efforts for DevSecOps/SRE as defined in the Performance Work Statement