Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 4 days ago

Senior DevSecOps Engineer

Ciklum132 open roles

Where
Brazil
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior DevSecOps EngineerCiklum · Brazil

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Ciklum's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. Ciklum postings stay open a median of 11 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 4 days ago

Ciklum median: 11 days open

The posting

Job Description

Ciklum is looking for a Senior DevSecOps Engineer to join our team in Brazil.

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About the role:

As a Senior DevSecOps Engineer, you'll become a part of a cross-functional development team engineering experience of tomorrow. The DevSecOps Engineer is responsible for architecting and maintaining the high-security infrastructure required for an enterprise-grade Agent Development Platform (ADP). You will be tasked with building the secure "sandbox" where autonomous agents live, ensuring zero-trust connectivity and managing the specialized data stores that power agentic reasoning. You will lead the setup of the AWS production environment and the implementation of Firecracker MicroVMs to provide isolated, ephemeral runtimes for agents. You are the guardian of the platform's "Egress Controls," ensuring that while agents can reason over proprietary data, they can never exfiltrate it.

Responsibilities:

  • Agent Sandboxing & Isolation: Implement and manage Firecracker MicroVMs (or restricted Kubernetes/Docker environments) to ensure agents execute in strictly isolated, secure runtimes
  • Secure Data Infrastructure: Provision and optimize the platform's multi-layered data stack, including PostgreSQL (OLTP), ChromaDB/PGVector (VectorStore), and GraphDB (Neo4j) for relational knowledge mapping
  • Event Orchestration: Build and manage high-performance Event Streams (AWS SQS, Event Bridge, or Kafka) to handle agent-to-agent communication and Human-in-the-Loop (HITL) escalation triggers
  • Infrastructure as Code (IaC): Automate the provisioning of AWS cloud infrastructure and Kubernetes clusters using industry-standard tools
  • Security & Identity Integration: Implement WorkOS/IDP for B2B identity management and multi-tenancy, ensuring strict logical separation of tenant data and configurations
  • Network Hardening: Design and enforce strict egress firewalls and proxy-only outbound routing to prevent data exfiltration by autonomous agents

Requirements:

  • Cloud & Containers: Deep expertise in AWS, Kubernetes, and container security; proven experience with Firecracker MicroVMs is highly desirable
  • Database Management: Hands-on experience managing and scaling Vector Databases (Chroma, PGVector) and Graph Databases for AI applications
  • Security First Mindset: Strong understanding of zero-trust architecture, OWASP principles, and secure design for AI systems
  • Messaging & Events: Proficiency in managing event-driven architectures and streaming platforms for real-time data processing
  • Automation: Advanced scripting skills (Python, Bash) and a track record of implementing automated security gates in CI/CD pipelines
  • Workflow Orchestration: Experience with Temporal for managing long-running, multi-stage agentic workflows

Desirable:

  • Compliance: Experience preparing infrastructure for SOC 2, ISO 27001, or GDPR readiness
  • Agentic Frameworks: Familiarity with LangSmith or Langfuse for observability and tracing of agent workloads

What’s in it for you?

  • Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and mental health programs, 5 undocumented sick-leave days per year
  • Tailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses and company-paid certifications
  • Growth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globally
  • Long-term employment with 20 working-days paid vacation and local bank holidays
  • Flexibility: 100% remote work mode
  • Opportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally and fulfill your potential
  • Global impact: work on large-scale projects that redefine industries with international and fast-growing clients
  • Welcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company and regular team-building events

About us:

At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.

As we expand into Latin America, every Ciklumer is helping to shape our story. Collaborate with seasoned experts and make a global impact backed by two decades of industry leadership.

Explore, empower, engineer with Ciklum!

Interested already? We would love to get to know you! Submit your application. We can’t wait to see you at Ciklum.

#LI-VH1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Ciklum's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Ciklum's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Ciklum's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.