Senior Software Engineer - IAM

Accountabilities:

• • Design, develop, and scale centralized Authentication (AuthN) and Authorization (AuthZ) platforms that serve as core security infrastructure.
  • Solve complex engineering challenges involving high scale, resilience, fault tolerance, concurrency, and low latency, where authorization checks are part of virtually every request.
  • Collaborate with engineering teams, product managers, and security specialists to establish secure and scalable patterns for user-to-service and service-to-service communication.
  • Own the full software development lifecycle for IAM products, including requirements definition, architecture, development, testing, deployment, monitoring, maintenance, and continuous improvement.
  • Design and evolve secure, scalable software architectures and RESTful APIs.
  • Participate in architecture discussions, technical design reviews, and code reviews while reinforcing high standards for software quality and engineering practices.
  • Monitor the health, performance, and reliability of authentication and authorization services, proactively identifying and resolving potential issues.
  • Respond to production incidents, troubleshoot complex software problems, conduct post-mortems, and implement improvements to prevent recurring incidents.
  • Mentor other software engineers and contribute to a culture of knowledge sharing, technical excellence, and continuous learning.
  • Partner across teams to improve developer experience, security practices, reliability, and the overall quality of IAM services.

  Requirements:

  • Proven professional experience as a Senior Software Engineer or in a comparable software engineering role, with strong expertise in identity, access, or security-related systems.
  • Strong practical understanding of Authentication and Authorization concepts, protocols, and standards such as OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, RBAC, and ABAC.
  • Proficiency in one or more programming languages commonly used for backend development, such as Java, Kotlin, Go, or Python.
  • Experience designing and evolving scalable software architectures from the ground up, with strong expertise in building secure and reliable RESTful APIs.
  • Solid software engineering fundamentals, including version control, automated testing, deployment automation, technical documentation, and Agile development practices.
  • Strong understanding of database design and evolution, as well as experience with monitoring, observability, and application performance management.
  • Experience working with highly available and distributed systems, with a structured approach to solving complex technical problems.
  • Strong attention to detail, ownership, communication, collaboration, and a demonstrated ability to learn and deliver meaningful impact through high-quality engineering.
  • Fluency in Portuguese and advanced English, with the ability to communicate effectively with international colleagues and partners.
  • Experience with centralized Identity Providers (IdPs) or fine-grained authorization systems such as Zanzibar-based models or OPA is a plus.
  • Familiarity with AWS or GCP and their native IAM and security services is an advantage.
  • Understanding of service-to-service authentication concepts such as Workload Identity, mTLS, SPIFFE, and SPIRE is a plus.
  • Experience mentoring software engineers and helping teams improve their technical practices is desirable.
  • Knowledge of testing and tuning highly concurrent, latency-sensitive distributed systems is advantageous.
  • Familiarity with containers, Kubernetes, and modern CI/CD pipelines, including integrating security checks into delivery workflows, is a plus.

  Benefits:

  • Competitive salary.
  • Profit-sharing program.
  • Meal allowance.
  • Health insurance.
  • Dental plan.
  • Life insurance.
  • Childcare and atypical parenthood subsidies.
  • Wellhub membership.
  • Home-office allowance.
  • Employee assistance program providing mental health, social, legal, and financial support.
  • Extended parental leave.
  • Additional days off for birthdays, Mother's Day, and Father's Day.
  • Benefits club offering discounts on everyday services.
  • Discounts at educational institutions.
  • Reading kits for children through PlayKids.
  • Remote-first work model, allowing employees to work from anywhere in Brazil.
  • Option to work from São Paulo offices or partner coworking spaces up to twice per week.
  • Inclusive and collaborative environment focused on innovation, professional development, and high-quality engineering.