About the Role
We are looking for a Senior DevOps Engineer to maintain, optimize, and continuously improve the CI/CD platform, infrastructure-as-code, and operational practices for a mature, stable multi-environment AWS ecosystem. The solution is fully developed and in production; the focus is on continuous improvement, cost optimization, reliability, and operational excellence. Additionally, the project is undergoing an AI-First transformation, adopting AWS Kiro and custom AI agents to implement an AI-driven Development Lifecycle (AI-DLC). You will work closely with development squads to ensure fast, reliable, and secure delivery of enhancements and fixes.
About the Role
We are looking for a Senior DevOps Engineer to maintain, optimize, and continuously improve the CI/CD platform, infrastructure-as-code, and operational practices for a mature, stable multi-environment AWS ecosystem. The solution is fully developed and in production; the focus is on continuous improvement, cost optimization, reliability, and operational excellence. Additionally, the project is undergoing an AI-First transformation, adopting AWS Kiro and custom AI agents to implement an AI-driven Development Lifecycle (AI-DLC). You will work closely with development squads to ensure fast, reliable, and secure delivery of enhancements and fixes.
Key Responsibilities
- Maintain and evolve CI/CD pipelines (AWS CodeBuild, CodePipeline) ensuring reliability and speed of delivery
- Maintain and improve Infrastructure as Code using AWS CDK (Python primarily, some TypeScript) across multiple AWS accounts
- Optimize serverless infrastructure performance, cost, and reliability (Lambda, API Gateway, AppSync, Step Functions, EventBridge)
- Improve and extend observability solutions (CloudWatch, OpenSearch dashboards, structured logging, alerting)
- Continuously strengthen security posture including IAM policies, KMS encryption, Secrets Manager, and network segmentation
- Maintain and tune data infrastructure components (RDS PostgreSQL, ElastiCache Redis, DynamoDB, S3)
- Review and improve disaster recovery strategies, backup automation, and rollback mechanisms
- Support multi-account governance and cross-account resource management
- Collaborate with development teams on deployment strategies (blue/green, canary, feature flags)
- Drive operational excellence through runbooks, incident response procedures, and post-mortem processes
- Apply FinOps practices to monitor, optimize, and report on cloud cost and resource utilization
- Identify and implement continuous improvement initiatives across infrastructure, pipelines, and operational processes
- Contribute to the AI-First transformation by integrating AI agents and AI-assisted workflows into the development and operations lifecycle
- Troubleshoot production issues and perform root cause analysis
- Mentor junior team members on cloud infrastructure and DevOps practices
Key Challenges
- Sovereign Cloud: reduce footprint on vendor lock-in AWS solutions and migrate workloads toward containers and cloud-native standard technologies
- Migration and Modernization: plan and execute application and workload migration to AWS through 2029
- Propose improvements and new solutions at the weekly architecture board for cost reduction, operational improvements, and adoption of new AWS or market features
What We Offer
- Access and incentive to pursue multiple certifications (AWS, Azure, GCP, GitHub, AI, and more)
- Be part of a 60+ DevOps engineering community, working across 25+ projects in different industries and countries
- Collaborative environment with internal and external meet-ups, happy hours, and challenges beyond project work
- Access to leading AI tools and platforms
- Opportunity to work on a high-impact EU institutional project with modern serverless architecture
- Active AI-First transformation with cutting-edge AI-assisted development practices
Required Technical Skills
- Advanced proficiency in Amazon Web Services (AWS) - multi-account environments
- Strong experience with Infrastructure as Code (AWS CDK with Python/TypeScript; CloudFormation)
- CI/CD pipeline design and management (CodeBuild, CodePipeline, or equivalent)
- Containerization and orchestration (Docker, ECS/Fargate)
- Serverless architecture (Lambda, API Gateway, Step Functions, EventBridge)
- Networking (VPC, subnets, security groups, PrivateLink, CloudFront)
- Monitoring and observability (CloudWatch, OpenSearch, structured logging)
- Scripting and automation (Python, Bash, PowerShell)
- Database operations (PostgreSQL, Redis, DynamoDB)
- Security hardening (IAM, KMS, WAF, Secrets Manager)
- Maintain and enforce security and quality gates across CI/CD pipelines (OWASP Dependency Check, Prowler, SonarQube, AWS Config, ECR image scanning)
- FinOps fundamentals (cost allocation, tagging strategies, resource optimization)
Desired Qualifications
- 5+ years of experience in DevOps/Platform Engineering roles
- Experience with multi-environment deployment strategies and release management
- Familiarity with Agile/Scrum delivery (Jira, Confluence)
- Experience with Git workflows and branching strategies
- Understanding of compliance and data sovereignty requirements (EU context)
- Interest or experience in AI-assisted development tools and workflows
- Strong communication skills and ability to work independently as an SME
- Active participation in team discussions and problem-solving
- Continuous improvement mindset with a track record of optimizing processes and reducing waste
Legal
Must own a valid work permit or EU/Schengen Space Nationality to legally work in Portugal
What We Offer
- Health insurance;
- Life Insurance and Pension Plan Programs;
- Free medical services at the office (Physician, Nutritionist, Psychologist);
- Wellness programs;
- Flexben Program (Support for Education, Kindergarden, Training, Technology, Health);
- Employee Share Purchase Plan;
- Personalized training paths and access to Udemy and Plurisight Plataforms;
- Flex-ability program (financial and flexible support for people with disabilities);
- Special banking conditions;
- Hybrid working model.