All remote jobs

DevOps & Security Engineer – Entertainment

AI Summary
This senior DevOps and Security Engineer role owns the cloud, delivery, and security foundations for a new headless web platform and backend services. The engineer will operate Google Cloud infrastructure, Cloudflare edge security, Terraform-based infrastructure as code, and CI/CD pipelines. Core responsibilities include IAM, secrets management, vulnerability scanning, observability, incident response, and authentication-service security. The role requires at least five years of relevant DevOps, SRE, or cloud infrastructure experience and close collaboration with Core Web and Core Platform teams. It is a fully remote position for candidates based in Latin America.
Remote from
Brazil
Salary
Undisclosed
Employment
Full Time
Experience
Senior
Published
Apply before
8 Dec 2026
Listing views
24
Application actions
1
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

Opportunity details

About this role.

About Truelogic

At Truelogic we are a leading provider of nearshore staff augmentation services headquartered in New York. For over two decades, we’ve been delivering top-tier technology solutions to companies of all sizes, from innovative startups to industry leaders, helping them achieve their digital transformation goals.

Our team of 600+ highly skilled tech professionals, based in Latin America, drives digital disruption by partnering with U.S. companies on their most impactful projects. Whether collaborating with Fortune 500 giants or scaling startups, we deliver results that make a difference.

By applying for this position, you’re taking the first step in joining a dynamic team that values your expertise and aspirations. We aim to align your skills with opportunities that foster exceptional career growth and success while contributing to transformative projects that shape the future.

Our Client

Our client is an independent global news organization dedicated to factual reporting. Founded in 1846, our client remains one of the most trusted sources of fast, accurate, and unbiased news across all formats, as well as an essential provider of technology and services vital to the news industry. More than half of the world’s population sees our client’s journalism every day.

Job Summary

As our client brings backend services in-house and launches a new headless front end, it needs a strong infrastructure and security foundation to support both. You will own the cloud infrastructure, delivery pipelines, and security posture, working across the Core Web and Core Platform teams.

Responsibilities

  • Design and run cloud infrastructure on Google Cloud for the new front-end and backend services.

  • Set up and manage Cloudflare: CDN, WAF, DNS, caching and edge security.

  • Define and implement the security posture: IAM, secrets, scanning, logging and alerting.

  • Build and maintain CI/CD pipelines for the Core Web and Core Platform teams.

  • Manage infrastructure as code with Terraform.

  • Support the security of the new authentication service.

  • Set up monitoring and incident response practices.

Qualifications and Job Requirements

  • 5+ years in DevOps, SRE or cloud infrastructure, with security responsibilities.

  • Strong Google Cloud (IAM, networking, GKE or Cloud Run, Cloud Armor, Secret Manager)

  • Cloudflare: CDN, WAF, DNS, rules, bot and DDoS protection.

  • Hands-on security posture setup: least-privilege IAM, secrets management, vulnerability scanning, logging and alerting.

  • Infrastructure as Code with Terraform

  • CI/CD pipelines (GitHub Actions, Cloud Build or similar)

  • Containers and Kubernetes.

  • Fluent English.

  • Must be based in Latin America (LATAM).

What We Offer

  • 100% Remote Work: Enjoy the freedom to work from the location that helps you thrive. All it takes is a laptop and a reliable internet connection.

  • Highly Competitive USD Pay: Earn an excellent, market-leading compensation in USD, that goes beyond typical market offerings.

  • Paid Time Off: We value your well-being. Our paid time off policies ensure you have the chance to unwind and recharge when needed.

  • Work with Autonomy: Enjoy the freedom to manage your time as long as the work gets done. Focus on results, not the clock.

  • Work with Top American Companies: Grow your expertise working on innovative, high-impact projects with Industry-Leading U.S. Companies.

Why You’ll Like Working Here

  • A Culture That Values You: We prioritize well-being and work-life balance, offering engagement activities and fostering dynamic teams to ensure you thrive both personally and professionally.

  • Diverse, Global Network: Connect with over 600 professionals in 25+ countries, expand your network, and collaborate with a multicultural team from Latin America.

  • Team Up with Skilled Professionals: Join forces with senior talent. All of our team members are seasoned experts, ensuring you’re working with the best in your field.

Apply now!

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

5/5
EasyHard

Pace & Pressure

4/5
RelaxedFast-paced

Autonomy Level

5/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThe position combines production cloud infrastructure ownership with hands-on security engineering across multiple critical systems. It requires senior-level judgment in GCP, Cloudflare, Kubernetes, Terraform, CI/CD, incident response, and least-privilege access design.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Highly competitive
$110,000
US market range (per year)$95k–$125k
AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer salary range is disclosed; the posting only states that pay is in USD and highly competitive. The annual USD estimate is an inferred market range for a senior remote DevOps and security engineer serving a U.S.-based client from Latin America.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How would you design a secure Google Cloud foundation for new frontend and backend services?

I would begin with separate environments and projects, least-privilege IAM roles, centralized identity controls, network segmentation, and Secret Manager for sensitive values. I would define the infrastructure through Terraform, enable audit logging, implement policy guardrails, and establish monitoring and alerting before production deployment.

What is your approach to managing Cloudflare for a public-facing application?

I would configure DNS, CDN caching, TLS, WAF rules, rate limiting, bot protection, and DDoS controls according to the application threat model. I would also ensure origin protection, restrict direct origin access where possible, log security events, and regularly tune rules based on observed traffic and incidents.

Describe how you would build a secure CI/CD pipeline for this environment.

I would use pull-request validation, automated tests, infrastructure plan reviews, dependency and container scanning, and controlled deployment promotion across environments. Credentials would use short-lived workload identity rather than static secrets, while production changes would include approvals, auditability, rollback procedures, and post-deployment monitoring.

How do you apply least-privilege IAM in a fast-moving engineering organization?

I start by mapping required actions to service accounts, teams, and workloads, then grant narrowly scoped roles rather than broad predefined access. I use group-based access, short-lived credentials, periodic access reviews, audit-log analysis, and automated policy checks to identify and remove unnecessary permissions.

Tell us about your process for responding to a production security incident.

I first contain the issue while preserving evidence, assess scope and customer impact, and communicate clearly to the relevant stakeholders. I then eradicate the cause, restore services safely, validate monitoring, and lead a blameless post-incident review with concrete remediation items such as new detections, access changes, or deployment controls.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Add alert
Jobs Talent AI Tools Salaries
Menu