Cloud Infrastructure Engineer

Location: Must reside in Brazil

Company

hirify.global provides an open IoT platform connecting fleets, application developers, vehicle manufacturers, and equipment providers across the transportation industry.

What you will do

• Own and evolve the multi-account AWS landing zone, including AWS Organizations, Control Tower, Account Factory for Terraform, service control policies, tagging, and permission boundaries.
• Extend governance, security controls, observability, backup, and operational standards across AWS, Azure, and GCP.
• Design cloud identity and access management, private networking, DNS, transit connectivity, and zero-trust access models.
• Build self-service infrastructure capabilities, reusable Terraform and Terragrunt modules, infrastructure patterns, and CI/CD automation.
• Design backup, restore, disaster recovery, immutable backup, and ransomware-resistant protection across regions, accounts, and business units.
• Partner with Security and FinOps teams on cloud remediation, risk reduction, cost optimization, documentation, and operating standards.

Requirements

• 5+ years of professional experience in cloud infrastructure, DevOps, SRE, platform engineering, systems engineering, or a related discipline.
• 3+ years of hands-on experience with AWS or another major public cloud, including organizational-scale AWS, multi-account architecture, and Control Tower or a comparable landing zone.
• Production experience with Azure or GCP, plus at least 1 year of Infrastructure as Code experience with Terraform or Terragrunt.
• Hands-on experience with IAM, SSO, SAML, SCIM, permission boundaries, least-privilege access, cloud networking, DNS, private connectivity, and network security.
• Experience with CI/CD pipelines, scripting or programming in Python, Go, Bash, or similar languages, Linux, Kubernetes, and cloud-native infrastructure.
• Advanced English proficiency and residence in Brazil required. A bachelor's degree in a relevant technical field is also required.

Nice to have

• AWS Control Tower, AFT, IPAM, Transit Gateway, Cloud WAN, and multi-cloud governance experience.
• Immutable backup, ransomware protection, managed data platforms, cloud security platforms, and zero-trust networking experience.
• Cloudflare WAF and DNS, PKI lifecycle management, automated remediation, MCP servers, or reusable AI agent skills.
• FinOps, SOC 2, GitHub organization administration, and relevant cloud, Terraform, or Kubernetes certifications.

Culture & Benefits

• Collaborative environment centered on innovation, empathy, resilience, transparency, and diverse perspectives.
• AI coding agents are used to accelerate implementation and automation with rigorous engineering review, security, testing, and production standards.
• The role supports cross-functional work with Engineering, Security, FinOps, and other technical teams.
• Senior individual contributor position with opportunities to mentor and influence engineers without direct people management.