• Design, deploy, and operate enterprise observability platforms. • Build and maintain Splunk Enterprise/Splunk Cloud infrastructure including Indexers, Search Head Clusters, Heavy Forwarders, and Deployment Servers. • Deploy and operate large-scale Elasticsearch clusters for log analytics and search. • Design, deploy, and support distributed tracing platforms using Grafana Tempo and OpenTelemetry. • Build and maintain end-to-end tracing pipelines, instrumentation standards, and trace retention strategies. • Scale Prometheus, Grafana, Kafka, Tempo, and OpenTelemetry-based monitoring solutions. • Develop dashboards, alerts, analytics, and trace visualizations using Splunk SPL, Grafana, Kibana, and Tempo. • Automate infrastructure using Terraform and configuration management tools.

• Design and implement enterprise-scale multi-cloud infrastructure across Microsoft Azure and AWS, with a focus on Azure as the primary platform, ensuring high availability, fault tolerance, and performance for all environments and services. • Develop and deploy Infrastructure as Code (IaC) using Terraform as the primary tool, with proficiency in ARM/Bicep and AWS CloudFormation to standardize cloud provisioning, enforce configuration governance, and enable repeatable, version-controlled deployments. • Build and maintain CI/CD pipelines using GitHub Actions and GitHub as the primary version control system to automate build, test, and deployment processes aligned with product delivery timelines. • Establish comprehensive monitoring, observability, and incident response capabilities using Azure Monitor, CloudWatch, Datadog, and Prometheus to uphold enterprise SLAs, detect anomalies, and drive continuous reliability improvement. • Manage Azure infrastructure fundamentals including subscriptions, tenants, VNets, VWAN, Network Security Groups, and firewalls to establish secure, scalable, and compliant cloud foundations. • Drive cloud cost optimization through FinOps practices—leveraging Azure Cost Management and AWS Cost Explorer to right-size resources, implement governance frameworks, and eliminate waste across the enterprise. • Enforce security and compliance standards across cloud environments in partnership with the CISO, implementing IAM controls, network segmentation, encryption, and zero-trust architecture aligned with SOC 2, FedRAMP, and CMMC requirements. • Serve as MBI's primary technical liaison with Microsoft Azure and AWS—managing vendor partnerships, coordinating architecture reviews, and aligning the cloud roadmap with provider capabilities and strategic initiatives. • Write automation scripts and tools in Python, Bash, or PowerShell to streamline infrastructure deployment, system integration, and DevOps workflows.

• Administrar, monitorar e sustentar os ambientes de infraestrutura híbrida (Cloud e On-Premises), assegurando alta disponibilidade, performance, segurança e continuidade dos serviços. • Gerenciar e evoluir ambientes em AWS e Azure, garantindo a adoção das melhores práticas de arquitetura, governança e otimização de recursos. • Administrar a infraestrutura On-Premises, incluindo servidores Windows Server, Linux, ambientes VMware e plataformas AIX. • Implementar e disseminar práticas DevOps, promovendo a integração entre as equipes de Infraestrutura e Desenvolvimento para aumentar a eficiência e a qualidade das entregas. • Desenvolver e manter soluções de Infraestrutura como Código (IaC) utilizando Terraform, garantindo padronização, escalabilidade e automação dos ambientes. • Administrar e suportar ambientes containerizados com Kubernetes, assegurando disponibilidade, escalabilidade e confiabilidade das aplicações. • Automatizar rotinas operacionais, provisionamento de infraestrutura e pipelines de implantação, reduzindo atividades manuais e aumentando a eficiência operacional. • Administrar repositórios e fluxos de versionamento utilizando GitHub, apoiando a implementação de pipelines de integração e entrega contínua (CI/CD). • Monitorar continuamente os ambientes, identificando riscos, gargalos de desempenho e oportunidades de melhoria, propondo ações preventivas e corretivas. • Atuar na resolução de incidentes críticos e problemas de infraestrutura, garantindo a continuidade dos serviços e o cumprimento dos níveis de serviço (SLAs). • Participar de projetos de modernização tecnológica, migração para Cloud e evolução da arquitetura de infraestrutura corporativa. • Implementar e manter controles de segurança, backup, recuperação de desastres e políticas de governança da infraestrutura. • Documentar arquiteturas, procedimentos operacionais, padrões técnicos e boas práticas, contribuindo para a gestão do conhecimento da área. • Apoiar tecnicamente equipes multidisciplinares, compartilhando conhecimento e contribuindo para a evolução das práticas de infraestrutura, automação e DevOps.

Role Description The Senior AEM DevSecOps Engineer will oversee and automate our AEM infrastructure with a primary focus on security, reliability, and automated compliance. You will bridge the gap between development and operations by embedding security directly into the CI/CD pipeline and managing complex identity and content delivery architectures. Your role is pivotal in ensuring that our platform is not only high-performing but resilient against modern threats like DDoS attacks. What You’ll Be Doing - Identity & Access Management: Configure and manage AEM Cloud. - Edge & CDN Protection: Manage and configure CDN (e.g., Cloudflare, or Adobe-managed CDN) to optimize performance and implement DDoS mitigation strategies. - Traffic Filtering: Implement and maintain Traffic Filter Rules and Web Application Firewall (WAF) configurations at the CDN level to block malicious spikes and sophisticated application-layer attacks. - Automated Security Scanning: Integrate security tools (SAST/DAST) and secrets detection into CI/CD pipelines (Jenkins, GitLab) to identify vulnerabilities early in the development cycle. - Environment Hardening: Install and manage AEM author, publish, and dispatcher instances with a focus on Dispatcher security hardening, SSL certificate automation, and ModSecurity configurations. - Observability & Incident Response: Monitor system performance and security logs using tools like Splunk to proactively address threats and performance bottlenecks. - Compliance Auditing: Regularly audit the platform and its integrations (Adobe Analytics, Target) to ensure alignment with corporate security policies and industry standards. Qualifications - 5+ years in administering and securing AEM environments. - Strong understanding of Headless CMS security best practices, including API key management and JWT authentication. - Expertise in managing CDNs and implementing DDoS mitigation and WAF rules. - Proficiency in Apache Sling, JCR, OSGi, and web servers like Nginx or Apache. - Hands-on experience with scripting (Python) and CI/CD tools (Jenkins, CircleCI) to automate security and deployment workflows. - Experience with cloud-based AEM implementations, such as AEM as a Cloud Service (AEMaaCS) or AWS/Azure. - Proficiency in analyzing log files, thread dumps, and heap dumps to resolve security incidents or performance outages. Requirements - Oversee the security of AEM Headless deployments, including protecting GraphQL endpoints, managing CORS policies, and ensuring secure communication for decoupled front-end frameworks (React/Angular). - Proven experience integrating Vercel Cloud with AEM cloud. - Knowledge of NextJS, React code. Benefits - Amazing Benefits - Making Social Impact - Fostering Diversity, Equity, Inclusion and Belonging at Okta