Senior DevSecOps Engineer (São Paulo based)

About Us

1GLOBAL is a technology-driven global mobile communications provider helping enterprises and consumer brands deliver seamless connectivity worldwide. Powered by a best-in-class telecom platform, proprietary eSIM technology, and its own mobile core network across 15 countries, 1GLOBAL operates as a fully regulated telecommunications provider in 43 countries.

Founded in 2022, 1GLOBAL has rapidly become one of Europe's fastest-growing telecom technology companies, connecting more than 80 million people and devices globally. Our customers include leading banks, multinational enterprises, global retailers, travel companies, payment service providers, and digital-first businesses.

Headquartered in the Netherlands, with R&D hubs in Lisbon, Berlin, and São Paulo, 1GLOBAL employs over 550 professionals across 16 countries. With annual revenues exceeding US$200 million and a strong track record of profitability, we continue to invest in innovation, infrastructure, and international expansion as we redefine the future of global mobile connectivity.

About the Ideal Candidate

We are looking for a talented Senior DevSecOps / Cloud Security Engineer to join our Technology Department, with a focus on strengthening and automating our security posture across cloud and hybrid infrastructure.

As a DevSecOps / Cloud Security Engineer, you will be responsible for embedding security into every stage of our infrastructure lifecycle, from design to deployment. You will lead the implementation of cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines. Your role includes continuous vulnerability management, network protection, monitoring for threats, and working with development, DevOps and IP teams to ensure secure-by-default practices. You’ll also proactively identify risks, secure network perimeters, and automate remediation wherever possible.

About the Role

Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles

Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation

Embed security automation into CI/CD pipelines, including image scanning, IaC validation, and policy enforcement

Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats

Design and maintain strong IAM and secrets management practices, enforcing least-privilege access

Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design

Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection where required

Ensure alignment with internal security policies and external frameworks (CIS, NIST, ISO 27001, etc.)

Produce and maintain clear documentation, including security architectures, runbooks, and incident response playbooks

Act as a security champion, driving best practices, awareness, and secure engineering culture across teams

Requirements

About You

A minimum of 3+ years Cloud Security / DevSecOps / Infrastructure Security

Strong AWS security fundamentals (IAM, KMS, GuardDuty, Config, Security Hub)

Solid Linux security and cloud networking fundamentals

Hands-on Kubernetes security (RBAC, NetworkPolicies, pod security, image scanning)

Infrastructure as Code (Terraform) and Git-based workflows

Scripting for automation (Python or Go or Bash)

Experience with vulnerability management and container security

Security-first mindset with strong troubleshooting skills

Experience with WAFs and cloud DDoS protection

Comfortable with packet inspection, flow analysis , and traffic monitoring (tcpdump, Wireshark, Suricata, etc.)

Benefits

What we offer?

CLT contract — enjoy job stability and reliable benefits that value your work

Quarterly performance bonuses to reward your hard work