Ebury is a hyper-growth FinTech firm, named in 2021 as one of the top 15 European Fintechs to work for by AltFi. We offer a range of products including FX risk management, trade finance, currency accounts, international payments and API integration.São Paulo Office - Hybrid: 4 days in the office, 1 day working from homeEbury is a Global FinTech: we apply new technologies to enhance and automate financial services and processes. This allows small and medium-sized businesses to trade and transact internationally by eliminating boundaries related to more traditional.Are you ready to be an Eburian?As a digital international payments platform, we are constantly challenged to change levels of quality, security and usability. That's why we look for innovative and critical employees who care about the results and impact of our products on society. Our business is growing at an impressive speed and our team needs new employees to make a difference on this journey.We are always connected to the latest in the world of technology and software engineering. We trust our platforms to a variety of cutting-edge technologies and engineering methods that help us innovate at all times. We value professionals who seek constant learning without restricting their knowledge to a single technology.We are looking for a Staff Platform Engineer that is in line with the technological stack we use. If you don't have full adherence, don't worry, we like the diversity of knowledge and you can certainly learn a lot from our team.As part of the team, you will be responsible for helping to build an Engineering Platform aligned with the guidelines of our global team at Ebury.How we work today:Product-oriented multidisciplinary teams.Agile methodology.Scalable architecture oriented towards microservices.Microservices written in GoLang, Python, Kotlin, Node.js, and React.High processing capacity with intercommunication using GRPC/Kafka.Continuous integration and deployment in Google Cloud (GCP).Automation using GIT, Jenkins, Spinnaker, Ansible, and Terraform.Data persistence in DataStore.Monitoring based on 'observability' techniques using Prometheus.Immutable infrastructure with containers managed via Kubernetes.Responsibilities of the Staff Platform Engineering Role:Discuss and help define service owners created in GCP (Google Cloud) for the business through a RACI Matrix.Define and create centralized access management controls for resources created by teams in GCP (Google Cloud).Implement a robust integration and shutdown process with the integration of access request and approval workflows through automations in JIRA.Implement periodic user access review procedures and IAM roles and permissions using insights from GCP Access Recommender to ensure integrity, governance, and security of access.Help define and deploy a standardized baseline for creating new projects to avoid the recurring proliferation of non-standard projects within the company.Develop standardized guidelines for creating new projects, covering naming conventions, resource allocations, and configurations.Introduce a comprehensive RBAC system within GCP, ensuring that users and service accounts receive permissions strictly based on their roles and responsibilities following the Principle of Least Privilege (PoLP).On Security:Help establish management policies and procedures for creating, issuing, and deactivating access keys (Credentials).Create and maintain an updated inventory of all existing keys with description, ownership, and classification/criticality.Design and implement monitoring controls for access to keys and their related functions.A plan for regularly rotating keys and service account credentials.Implement version control and access for service account keys - fine-grained control.Governance and creation of guardrails for platform self-service automation;Governance and creation of 'Golden Paths' automation for engineering teams;Governance and creation of observability for resources created through the engineering platform.Requirements and Qualifications:Advanced English. Spanish is a plus.Analytical, resilient, and multitasking profile.Management capability.Experience facilitating the adoption of IT standards and processes.Advanced knowledge of OS (Linux).Aptitude for scripting programming and IaC (Infrastructure as Code).Knowledge in Networking (TCP/IP, Firewall, DNS, Routing, etc.).Cloud Platform operation in GCP (e.g., Function, Cloud SQL, Buckets, GKE, Firestore, VPC, Cloud DNS, IAM, Instances) and/or AWS (e.g., S3, RDS, EC2, ECS, Lambda, EKS, DynamoDB, IAM, CloudFront, VPC, R53).Knowledge of CI/CD (Tools such as: GitLab CI, Github Actions, Jenkins, ArgoCD, Spinnaker. Practices: Build, test, push, deploy stages).Orchestration of plugins and addons (K8S, EKS, GKE, Kops, Kubespray, Rancher, Helm, Nginx Ingress Controller or equivalent).Knowledge of Observability using tools such as: (Prometheus, Grafana, Jaeger, AlertManager, Kiali, ELK Stack, Loki, DataDog, Dynatrace, AppDynamics, CloudWatch, StackDriver, OpenTelemetry, New Relic. To generate and track: Metrics, Logging, Application Tracing).#LI-JM1About UsEbury is a FinTech success story, positioned among the fastest-growing international companies in its sector.Founded in 2009, we are headquartered in London and have more than 1700 staff with a presence in more than 25 countries worldwide. Cultural diversity is part of what makes Ebury a special place to be. From Sao Paulo to Dubai, Bucharest to Toronto, we enjoy sharing team experiences and celebrating success across the Ebury family.Hard work pays off: in 2019, Ebury received a £350 million investment from Banco Santander and has won internationally recognised awards including Financial Times: 1000 Europe's Fastest-Growing Companies.None of this would have been possible without our proudest achievement: our great people. Enthusiastic, innovative and collaborative teams, always ready to disrupt and revolutionise the fast-paced FinTech sector.We believe in inclusion. We stand against discrimination in all forms and have no tolerance for the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story because we want you and your uniqueness to help write our future.Please submit your application on the careers website directly, uploading your CV / resume in English.
#J-18808-Ljbffr