Skip to content

Open nowPosted 9 days ago

2112 - 2113 GitLab Administrator / Platform Engineer

inallmedia-llc73 open roles

Where
Brazil, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen now2112 - 2113 GitLab Administrator / Platform Engineerinallmedia-llc · Brazil, Remote
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on inallmedia-llc's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.7%1 day
  2. 3.5%3 days
  3. 7.8%7 days
  4. 14.6%14 days
  5. 34.1%30 days
This job: posted 9 days ago

The posting

📌 Position: GitLab Administrator / Platform Engineer

Location: Remote from LATAM

Contract Type: Full-time vendor (Contract directly with In All Media)

Time Zone Alignment: US Central Time (CT) overlap (6+ hours)

🧭 About In All Media

In All Media is a global technology and design firm focused on building impactful digital solutions through remote, distributed teams across LATAM. We partner with international clients across industries, providing long-term technical expertise, product innovation, and team augmentation. Contract Details: This is a 100% remote contractor position open to talent anywhere in LATAM. Your contract and engagement will be directly managed with In All Media.

🚀 Project Overview

In this role, you will drive the Service Account Security Migration & Licensing Optimization Initiative. You will play a pivotal role in strengthening platform security and optimizing licensing costs by migrating misconfigured user accounts to native platform service accounts, rotating embedded pipeline credentials, and establishing granular RBAC governance across complex GitLab automation environments. You will partner closely with distributed engineering and DevOps teams to ensure continuous pipeline reliability throughout this critical security cutover.

🔍 Key Responsibilities

  • Service Account & Non-Human Identity Migration: Manually migrate 88 existing service accounts (currently misconfigured as standard user accounts) to native platform service accounts to close security gaps and optimize license consumption.
  • Credential & Token Lifecycle Management: Rotate, replace, and configure API tokens, SSH keys, and service credentials within CI/CD pipelines and automation workflows, ensuring secure decommissioning of legacy access.
  • Access Control & RBAC Governance: Update and replicate granular permissions, group access, and project-level scopes for newly created automation identities across the source-control platform.
  • Pipeline & Integration Debugging: Troubleshoot, test, and resolve breaking CI/CD pipeline or automation integration issues that depend on non-human identities during token cutovers.
  • Cross-Team Stakeholder Coordination: Partner with engineering, DevOps, and project-owning teams to untangle unclear resource ownership, verify pipeline functionality post-migration, and drive operational follow-ups to completion.
  • Operational Ticket Execution: Process repetitive, parallel identity migration tasks and operational tickets systematically while maintaining audit trails.

💡 Must-Have Skills

  • GitLab Administration / Platform Engineering: Hands-on experience administering GitLab or enterprise VCS (Version Control System) platforms at scale.
  • CI/CD Pipeline Automation: Direct experience building, maintaining, and debugging automated CI/CD pipelines and deployment workflows.
  • Credential & Secrets Rotation: Proven background rotating, updating, and replacing credentials/tokens embedded in automation pipelines, alongside secure access decommissioning.
  • Non-Human Identity / Service Account Management: Experience managing, migrating, or configuring service accounts, system users, and automation identities.
  • Permissions & Access Management: Experience configuring RBAC (Role-Based Access Control), project permissions, and group-level access for automation accounts.
  • Professional Seniority: Mid- to Senior-Level experience in DevOps, System Administration, or IAM (Identity and Access Management) engineering.

🌟 Nice-to-Have Skills

  • Identity & Access Migrations: Direct experience with enterprise IAM migrations, permission replication, or platform token cutovers.
  • Secrets Hygiene & Security Remediation: Experience identifying and remediating credential exposure or insecure account configurations.
  • High-Volume Operational Ticket Management: Comfort handling repetitive, high-volume migration tasks across multiple teams/projects concurrently.
  • Cross-Functional Communication: Strong interpersonal skills to resolve ambiguous resource ownership and coordinate with distributed technical teams.

🌐 Time Zone & Collaboration

This role requires a minimum overlap of 6 hours with US Central Time (CT) business hours during a standard 8-hour workday to collaborate effectively with distributed engineering teams.

💬 Language

All interviews, technical documentation, daily team syncs, and operational communications will be conducted in English.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against inallmedia-llc's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on inallmedia-llc's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    inallmedia-llc's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.