Hybrid DevSecOps/SRE

at Franq

• Job title: DevSecOps/SRE
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Ansible, AWS, Cloud, Docker, Google Cloud Platform, Kubernetes, Linux, Python, Terraform
• Location requirements: Hybrid, Florianopolis, Brazil

About the role

• Security Engineer ensuring integrated operational security and data protection at Franq. Collaborating with engineering teams for high availability and compliance.

Responsibilities

• Work on security integrated into operations, ensuring the protection of infrastructure, applications and data—from the physical and network layers to development and continuous delivery processes—always aligned with security best practices and compliance.
• Administer and optimize Kubernetes clusters and cloud infrastructure (AWS/GCP), focusing on availability, performance and security.
• Implement and maintain infrastructure security controls, including network segmentation, environment hardening and access protection.
• Create and improve monitoring, alerts and incident detection mechanisms for security, with an emphasis on proactive measures.
• Automate deployments and infrastructure management, ensuring efficiency, scalability and security by default.
• Develop and evolve CI/CD pipelines, incorporating security checks into the delivery flow.
• Support the execution and analysis of application security tests, such as DAST, IAST and vulnerability assessments for in-house systems.
• Continuously strengthen system resilience, security and reliability.
• Collaborate with engineering teams to ensure high availability, operational best practices and security awareness.

Requirements

• Hands-on experience with security applied to infrastructure and the software lifecycle, understanding risks, controls and best practices, even if not exclusively focused on offensive security.
• Strong experience with Docker and Kubernetes, including troubleshooting, scalability and security aspects.
• Practical knowledge of Infrastructure as Code (IaC) with Terraform and/or Ansible, including access control and environment segregation.
• Experience with Cloud Computing (AWS/GCP):
• - VPC, IAM, Load Balancers, S3, RDS
• - Secure configuration and automation practices.
• Security and Networking:
• - Firewall and WAF configuration and management
• - Access control, network policies and threat mitigation.
• Automation and Scripting:
• - Intermediate to advanced proficiency in Python for operational and security automation.
• Intermediate Linux:
• - Server administration
• - Network troubleshooting
• - Basic hardening and system security concepts.
• Familiarity with access security best practices, such as user management, least privilege and secure authentication.

Benefits

• CLT employment contract (Brazilian labor regime);
• Flexible benefits card (Caju) with BRL 1,033.50 balance;
• Medical and dental assistance, no copay, fully subsidized by the company (Bradesco plan);
• Life insurance;
• Partnership with Wellhub (Gympass);
• Partnership with Psicologia Viva and Conexa Saúde;
• Day off during birthday month;
• Fruit basket available for on-site Franqers.