Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
DevOps & Security Engineer – Entertainment
- Remote from
- Brazil
- Salary
- Undisclosed
- Department
- DevOps & Infrastructure
- Employment
- Full Time
- Experience
- Senior
- Published
- Apply before
- 8 Dec 2026
- Listing views
- 24
- Application actions
- 1
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
About this role.
About Truelogic
At Truelogic we are a leading provider of nearshore staff augmentation services headquartered in New York. For over two decades, we’ve been delivering top-tier technology solutions to companies of all sizes, from innovative startups to industry leaders, helping them achieve their digital transformation goals.
Our team of 600+ highly skilled tech professionals, based in Latin America, drives digital disruption by partnering with U.S. companies on their most impactful projects. Whether collaborating with Fortune 500 giants or scaling startups, we deliver results that make a difference.
By applying for this position, you’re taking the first step in joining a dynamic team that values your expertise and aspirations. We aim to align your skills with opportunities that foster exceptional career growth and success while contributing to transformative projects that shape the future.
Our Client
Our client is an independent global news organization dedicated to factual reporting. Founded in 1846, our client remains one of the most trusted sources of fast, accurate, and unbiased news across all formats, as well as an essential provider of technology and services vital to the news industry. More than half of the world’s population sees our client’s journalism every day.
Job Summary
As our client brings backend services in-house and launches a new headless front end, it needs a strong infrastructure and security foundation to support both. You will own the cloud infrastructure, delivery pipelines, and security posture, working across the Core Web and Core Platform teams.
Responsibilities
Design and run cloud infrastructure on Google Cloud for the new front-end and backend services.
Set up and manage Cloudflare: CDN, WAF, DNS, caching and edge security.
Define and implement the security posture: IAM, secrets, scanning, logging and alerting.
Build and maintain CI/CD pipelines for the Core Web and Core Platform teams.
Manage infrastructure as code with Terraform.
Support the security of the new authentication service.
Set up monitoring and incident response practices.
Qualifications and Job Requirements
5+ years in DevOps, SRE or cloud infrastructure, with security responsibilities.
Strong Google Cloud (IAM, networking, GKE or Cloud Run, Cloud Armor, Secret Manager)
Cloudflare: CDN, WAF, DNS, rules, bot and DDoS protection.
Hands-on security posture setup: least-privilege IAM, secrets management, vulnerability scanning, logging and alerting.
Infrastructure as Code with Terraform
CI/CD pipelines (GitHub Actions, Cloud Build or similar)
Containers and Kubernetes.
Fluent English.
Must be based in Latin America (LATAM).
What We Offer
100% Remote Work: Enjoy the freedom to work from the location that helps you thrive. All it takes is a laptop and a reliable internet connection.
Highly Competitive USD Pay: Earn an excellent, market-leading compensation in USD, that goes beyond typical market offerings.
Paid Time Off: We value your well-being. Our paid time off policies ensure you have the chance to unwind and recharge when needed.
Work with Autonomy: Enjoy the freedom to manage your time as long as the work gets done. Focus on results, not the clock.
Work with Top American Companies: Grow your expertise working on innovative, high-impact projects with Industry-Leading U.S. Companies.
Why You’ll Like Working Here
A Culture That Values You: We prioritize well-being and work-life balance, offering engagement activities and fostering dynamic teams to ensure you thrive both personally and professionally.
Diverse, Global Network: Connect with over 600 professionals in 25+ countries, expand your network, and collaborate with a multicultural team from Latin America.
Team Up with Skilled Professionals: Join forces with senior talent. All of our team members are seasoned experts, ensuring you’re working with the best in your field.
Apply now!
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
4/5Autonomy Level
5/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would begin with separate environments and projects, least-privilege IAM roles, centralized identity controls, network segmentation, and Secret Manager for sensitive values. I would define the infrastructure through Terraform, enable audit logging, implement policy guardrails, and establish monitoring and alerting before production deployment.
I would configure DNS, CDN caching, TLS, WAF rules, rate limiting, bot protection, and DDoS controls according to the application threat model. I would also ensure origin protection, restrict direct origin access where possible, log security events, and regularly tune rules based on observed traffic and incidents.
I would use pull-request validation, automated tests, infrastructure plan reviews, dependency and container scanning, and controlled deployment promotion across environments. Credentials would use short-lived workload identity rather than static secrets, while production changes would include approvals, auditability, rollback procedures, and post-deployment monitoring.
I start by mapping required actions to service accounts, teams, and workloads, then grant narrowly scoped roles rather than broad predefined access. I use group-based access, short-lived credentials, periodic access reviews, audit-log analysis, and automated policy checks to identify and remove unnecessary permissions.
I first contain the issue while preserving evidence, assess scope and customer impact, and communicate clearly to the relevant stakeholders. I then eradicate the cause, restore services safely, validate monitoring, and lead a blameless post-incident review with concrete remediation items such as new detections, access changes, or deployment controls.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
