Staff Site Reliability Engineer, Payments Infrastructure
Staff-level SRE owning reliability and security of a payments platform spanning a legacy VM-based Azure estate and a modern AWS serverless stack (ECS, Lambda, Aurora), hired via hireworks for a U.S. K-12 education software client, remote within Brazil. Daily work: observability, Azure security hardening, IaC-enforced CI/CD, and limited-hours on-call.
- Compensation
- Not disclosed
- Location
- Brasília, Federal District, Brazil
- Work setup
- Remote
- Seniority
- Staff
- Employment
- Contract
- Experience
- 12+ years
- Category
- Sre
- Posted
Skills
Must have
- 12+ years of engineering experience, including proven experience as a Staff SRE or equivalent senior IC operating production infrastructure at scale
- Bachelor's degree in Computer Science, Engineering, or related field, or equivalent practical experience
- Genuine hands-on operational depth with Azure
- Experience securing a legacy, VM-based environment: RBAC, privileged access, network exposure remediation, and OS/database end-of-life upgrades
- Experience with Azure DevOps (ADO) or similar CI/CD tooling
- Expert-level IaC familiarity with hands-on expertise in at least one language (Terraform, Crossplane, OpenTofu, CDK, CloudFormation, or Bicep), applied as an enforced standard
- Hands-on database administration and performance tuning (SQL Server and/or managed relational DB such as Aurora MySQL): indexing, query performance, locking behavior at production scale
- Expert-level observability discipline (distributed tracing, logging, dashboards, alerting) with in-depth hands-on experience in at least one event-based observability platform (Datadog, Honeycomb, New
- Security/DevSecOps experience: posture management, vulnerability scanning, PCI-aware production operations
- Software-oriented engineering depth: comfortable reading and debugging application code (.NET, ideally React)
- Experience modernizing legacy .NET systems and the infrastructure underneath them
- Proficiency with Claude Code, Codex, or comparable AI-assisted development tools
Nice to have
- Experience with modern, containerized AWS infrastructure (ECS, Lambda, Step Functions, EventBridge, or comparable)
- Experience with automated testing frameworks
- Experience helping a newly combined or fast-growing SRE/infrastructure team mature (standardizing titles, access, tooling)
- Experience migrating or consolidating CI/CD tooling between providers with an eye toward reducing operational risk
- Background in payments or fintech infrastructure, particularly highly available environments
Full description
About hireworks
hireworks is building a community of top talent in key international markets by unlocking unparalleled access to positions at leading U.S. based companies. As your employer, hireworks will ensure you have a seamless interview, onboarding, and employee experience - providing ongoing support and resources along the way. Established in 2023, hireworks is forging corp-to-corp relationships with leading U.S. based organizations looking to grow their teams with best-in-class talent around the world. Working with hireworks means unlocking access to a network of local peers and mentors and career opportunities through our client network.
About Our client
A leading provider of innovative software and services to K-12 schools and educational institutions worldwide. Their mission is to empower schools to transform education through technology. They believe in the power of education to shape the future, and are committed to helping schools prepare students for success and make a positive impact on the world.
Position Overview
Our client's payments infrastructure spans two clouds and two application generations: a VM-based Azure estate that needs security hardening and modernization, and a modern AWS-based events platform. The SRE function is newly combined, bringing infrastructure ownership that used to be spread across teams under one roof, and is growing and maturing quickly. This is one of the two highest-priority hires in Payments: a Staff-level SRE who brings real technical leadership to a team still establishing its structure, owns reliability and security across both estates, and builds the paved road the rest of the organization needs to move fast safely.
Key Responsibilities
- Establish and operate monitoring, alerting, and reliability metrics across the Azure and AWS estates, working toward full critical-flow coverage
- Secure and remediate the Azure environment: network segmentation, fine-grained RBAC, privileged-access reviews, and end-of-life upgrades
- Operate and harden the AWS-based events platform (ECS, Lambda, Step Functions, EventBridge, Aurora, DynamoDB, CloudFront, WAF)
- Own or partner on CI/CD and release controls across both clouds
- Lead security posture work: cloud security posture management, vulnerability scanning, penetration testing, PCI-aware operations
- Help design and support a shared, limited-hours on-call model for the events platform
- Use AI-assisted development tools in a practical, controlled way, with human review as the final gate before anything ships
Required Qualifications
- 12+ years of overall engineering experience, including proven experience as a Staff SRE or equivalent senior IC operating production infrastructure at scale
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience