* Salário: R$ 3.000 a R$ 6.000 por mês (estimado)
* O valor exibido é uma estimativa calculada com base em dados públicos e referências do mercado. Não garantimos que este seja o salário oferecido para esta vaga específica.
Área: Tecnologia da Informação
Nível: Junior
About Confidencial (Apenas para Cadastrados)™
Confidencial (Apenas para Cadastrados)™ is a global identity security company founded in Brazil in 2001, dedicated to protecting the privileged access of human and machine identities. Our Privileged Access Management (PAM) platform is recognized for its rapid deployment and simplicity compared to legacy alternatives. More than 1,000 organizations across Latin America, North America, EMEA, and APAC trust Confidencial (Apenas para Cadastrados)™, including enterprises in highly regulated industries such as financial services. SaaS is Confidencial (Apenas para Cadastrados)™’s fastest-growing business and the engine of our global expansion: we are investing to make it the primary way customers around the world consume Confidencial (Apenas para Cadastrados)™. We hold SOC 2 Type II and ISO/IEC 27001 certifications and are actively expanding to other industry standards. This position is central to that journey.
The Position
As Head of SaaS Solutions, you will be responsible for the end-to-end operation of Confidencial (Apenas para Cadastrados)™’s SaaS platform: stable, resilient, secure, and available 24/7 for customers across every region we serve. The role reports directly to the CIO and leads a multi-team organization composed of managers and coordinators. This is not a hands-on position: it requires practical experience in SRE and cloud, but your core function is to organize, delegate, and oversee the work of the teams. The working model is hybrid, based in the São Paulo metropolitan area.
Your scope covers four key areas:
Site Reliability Engineering (SRE): reliability strategy, SLOs, observability, capacity, and automation.
Cloud Infrastructure: multi-region Google Cloud foundation, Linux fleet, MariaDB data layer, networking, Infrastructure as Code, and disaster recovery.
Production Operations & Support: 24/7 monitoring, incident and problem management, follow-the-sun coverage, and Tier 3 technical escalation.
Operational Governance & FinOps: change and operational governance, ITSM processes, compliance evidence, and ownership of the SaaS cloud budget.
You will partner closely with Product Engineering—who owns CI/CD, release, and platform engineering—and Corporate Security, who oversees the platform's security posture and certifications.
You will turn the products built by our engineering teams into a reliable global service, taking full ownership of the availability, resilience, and cost efficiency that our enterprise and regulated customers depend on.
What You Will Do
Reliability and SRE
Define and own SLIs, SLOs, and error budgets for all customer-facing services, translating them into contractual SLAs in alignment with Legal and Sales.
Build a mature observability practice (metrics, logs, traces, synthetic monitoring) featuring actionable alerts and low noise.
Drive toil automation, self-healing capabilities, and runbooks to deliver a measurable reduction in manual operational tasks.
Lead capacity planning, performance engineering, and resilience testing, including game days and chaos engineering experiments.
Cloud Infrastructure
Own the architecture and roadmap for our multi-region Google Cloud foundation, including expansion into new regions to satisfy data residency requirements.
Own the reliability of the Linux fleet and MariaDB data layer: high availability, replication, backup, and performance at scale.
Ensure all infrastructure is managed as code (Terraform or equivalent), maintaining consistent, reproducible environments across regions.
Own business continuity and disaster recovery: service-defined RTO/RPO metrics, tested backups, and regular DR drills.
Collaborate with Product Engineering (owners of CI/CD, release, and platform engineering) on production readiness, deployment safety, and the operability of new products.
Production Operations & Support
Run a 24/7/365 follow-the-sun operation with clear on-call rotations and sustainable team workloads.
Own end-to-end operational incident management: severity models, escalation paths, customer and executive communications, and the status page. Personally serve as the executive escalation point for Sev1 incidents. Security incidents are led by the SOC, with close cooperation from this role.
Lead blameless postmortems and problem management, ensuring corrective actions are delivered.
Act as the Tier 3 technical escalation point for Customer Support regarding platform issues.
On-Premises to SaaS Migration
Drive the migration plan for moving on-premises (self-hosted) customers to SaaS, partnering with Product, Customer Success, and Sales.
Build repeatable migration playbooks covering customer environment assessments, data and configuration migrations, cutover windows, and rollbacks.
Guarantee post-migration capacity, stability, and hypercare, tracking success metrics per migrated customer.
Governance, Compliance, and FinOps
Establish risk-proportionate ITSM practices (change, configuration, problem management) without slowing delivery pace.
Partner with Corporate Security (who owns the platform's security posture and certifications) to operate production security controls: hardening, patching, access governance, secrets management, and tenant isolation.
Deliver the operational evidence required for SOC 2 Type II and ISO/IEC 27001 audits, upcoming certifications, and due diligence assessments by regulated customers, including financial sector requirements.
Own the SaaS cloud budget and FinOps practice: cost visibility, unit economics per tenant and region, and the continuous improvement of SaaS gross margins.
Leadership & Organization
Lead, hire, and develop a global organization of managers, coordinators, and engineers across multiple time zones.
Establish the operating model, team topology, OKRs, and KPIs for SaaS Solutions, reporting progress to executive leadership.
Cultivate a culture of ownership, blameless learning, automation, and customer focus.
Manage vendors, cloud service providers, and partners, overseeing related budgets and contracts.
What Success Looks Like
First 30 days: You understand the platform, team, customers, and risks. You have evaluated the current baseline for reliability, security, and costs, and assumed leadership of the active reliability improvement program.
First 90 days: SLOs and error budgets are defined for critical services; incident and on-call models are clear; and the organizational design, hiring plan, and on-premises to SaaS migration roadmap are approved.
First 6 months: Follow-the-sun coverage is operational, DR has been tested against agreed RTO/RPO targets, and recurring root causes of incidents show a measurable decrease.
First 12 months: SLA targets are consistently met, audit evidence is produced seamlessly, cloud cost per customer is monitored and improving, on-premises to SaaS migrations run at scale via repeatable playbooks, and the platform is prepared for new regions and products.
What You Bring
12+ years of experience in SRE, cloud operations, infrastructure, or production engineering, with at least 5 years leading teams of managers or technical leads.
Proven track record of owning a 24/7 customer-facing, multi-tenant B2B SaaS platform in production, with a history of operating at 99.99% availability.
Experience building and running globally distributed teams across multiple regions and time zones, including follow-the-sun models.
Solid hands-on background in Google Cloud (strongly preferred) or another major public cloud provider, Linux at scale, and production relational databases (MariaDB/MySQL).
Working knowledge of Kubernetes, Infrastructure as Code (Terraform or equivalent), and modern deployment practices.
Demonstrated history with modern SRE practices: SLOs, error budgets, observability, incident command, and blameless postmortems.
Experience in regulated and certified environments (such as SOC 2 and ISO/IEC 27001), working alongside Security and Compliance teams on audits and customer due diligence.
Experience owning cloud budgets and executing FinOps strategies.
Executive-level communication: ability to walk a customer's CISO through an incident and discuss cost trade-offs with a CFO.
Fluent English. Spanish is a strong plus.
Nice to Have
Experience operating a security SaaS product (Identity, PAM, IAM, or similar) where the platform itself represents a high-value target.
Experience serving customers in financial services or other regulated industries, addressing regulatory requirements around outsourcing, cloud, and data residency.
Experience maturing a SaaS operation from scale-up phase to public company control and reporting standards.
Experience leading large-scale customer migrations from self-hosted to SaaS, multi-region database replication, and zero-downtime data migrations.
Experience with AI-assisted operations (AIOps, automated triage, LLM-based runbooks).
Certifications such as Google Cloud Professional (Cloud Architect or Cloud DevOps Engineer), CKA, or ITIL 4.
Benefits
Hiring Model: PJ
Wellhub
Birthday Day Off
English Classes
Access to ALURA
All equipment provided
Claude Code Plan