Senior Software Engineer - Endpoint Security

Accountabilities: Design, build, and maintain foundational endpoint security infrastructure to protect corporate data and ensure access is limited to authorized, secure, and compliant devices. Architect and automate security platforms, endpoint management systems, and collaboration tools using Infrastructure as Code (IaC), particularly Terraform and OpenTofu. Automate the configuration and deployment of service accounts, user groups, browser policies, and application access across platforms such as Google Workspace. Design, implement, and optimize granular Zero Trust Network Access (ZTNA) policies based on user identity and device security posture. Develop secure, clientless access solutions for partner networks and establish resilient corporate network authentication mechanisms, including 802.1X through private certificate authorities. Build automated endpoint protection workflows covering device health attestation, operating system and application patch management, application allowlists, and browser hardening. Improve mobile device security by streamlining automated Mobile Device Management (MDM) enrollment for Bring Your Own Device (BYOD) environments. Collaborate with DevOps, IT Operations, and software engineering teams to integrate security controls and device posture checks into developer workflows and automated CI/CD pipelines. Own the full software development lifecycle for internal security tools, automated integrations, and custom endpoint applications, from requirements gathering and architecture through testing, deployment, and monitoring. Promote engineering quality through clean, maintainable, and well-tested code, effective design patterns, and participation in technical and code reviews. Mentor junior and mid-level engineers and contribute to technical knowledge sharing and team development. Maintain system reliability through robust observability and SIEM integrations, including platforms such as Google SecOps. Troubleshoot complex issues across hardware, networks, and SaaS integrations, contribute to incident resolution, and develop automated remediation processes. Requirements: Proven experience with endpoint security and modern device management frameworks, including Apple MDM and Windows Configuration Service Providers (CSPs). Hands-on experience with modern MDM platforms such as Microsoft Intune and Kandji. Strong understanding of Zero Trust Network Access (ZTNA), device posture assessments, and device health attestation techniques. Demonstrated experience managing infrastructure, configurations, or security environments as code using Terraform, OpenTofu, or Terragrunt. Experience designing and evolving scalable software architectures and integrating with RESTful APIs. Understanding of cloud infrastructure platforms such as AWS or Google Cloud Platform (GCP). Familiarity with directory services and Identity Providers (IdPs), such as Google Workspace, Microsoft Entra ID, or Okta. Experience working in Agile development environments, including Scrum or Kanban. Strong computer science fundamentals, including data structures, algorithms, and secure software design patterns. Excellent analytical and problem-solving skills, with the ability to investigate complex technical issues involving multiple devices, networks, and integrations. Fluency in Portuguese and advanced or fluent English proficiency, both required for collaboration with international colleagues and suppliers.