Senior Software Engineer - IAM

Accountabilities:: Design, develop, and scale centralized Authentication (AuthN) and Authorization (AuthZ) platforms that serve as core security infrastructure. Solve complex engineering challenges involving high scale, resilience, fault tolerance, concurrency, and low latency , where authorization checks are part of virtually every request. Collaborate with engineering teams, product managers, and security specialists to establish secure and scalable patterns for user-to-service and service-to-service communication . Own the full software development lifecycle for IAM products, including requirements definition, architecture, development, testing, deployment, monitoring, maintenance, and continuous improvement. Design and evolve secure, scalable software architectures and RESTful APIs . Participate in architecture discussions, technical design reviews, and code reviews while reinforcing high standards for software quality and engineering practices. Monitor the health, performance, and reliability of authentication and authorization services, proactively identifying and resolving potential issues. Respond to production incidents, troubleshoot complex software problems, conduct post-mortems, and implement improvements to prevent recurring incidents. Mentor other software engineers and contribute to a culture of knowledge sharing, technical excellence, and continuous learning. Partner across teams to improve developer experience, security practices, reliability, and the overall quality of IAM services. Requirements: Proven professional experience as a Senior Software Engineer or in a comparable software engineering role, with strong expertise in identity, access, or security-related systems. Strong practical understanding of Authentication and Authorization concepts, protocols, and standards such as OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, RBAC, and ABAC . Proficiency in one or more programming languages commonly used for backend development, such as Java, Kotlin, Go, or Python . Experience designing and evolving scalable software architectures from the ground up, with strong expertise in building secure and reliable RESTful APIs . Solid software engineering fundamentals, including version control, automated testing, deployment automation, technical documentation, and Agile development practices . Strong understanding of database design and evolution , as well as experience with monitoring, observability, and application performance management. Experience working with highly available and distributed systems, with a structured approach to solving complex technical problems. Strong attention to detail, ownership, communication, collaboration, and a demonstrated ability to learn and deliver meaningful impact through high-quality engineering. Fluency in Portuguese and advanced English , with the ability to communicate effectively with international colleagues and partners. Experience with centralized Identity Providers (IdPs) or fine-grained authorization systems such as Zanzibar-based models or OPA is a plus. Familiarity with AWS or GCP and their native IAM and security services is an advantage. Understanding of service-to-service authentication concepts such as Workload Identity, mTLS, SPIFFE, and SPIRE is a plus. Experience mentoring software engineers and helping teams improve their technical practices is desirable. Knowledge of testing and tuning highly concurrent, latency-sensitive distributed systems is advantageous. Familiarity with containers, Kubernetes, and modern CI/CD pipelines , including integrating security checks into delivery workflows, is a plus. Benefits: Competitive salary. Profit-sharing program. Meal allowance. Health insurance. Dental plan. Life insurance. Childcare and atypical parenthood subsidies. Wellhub membership. Home-office allowance. Employee assistance program providing mental health, social, legal, and financial support. Extended parental leave. Additional days off for birthdays, Mother's Day, and Father's Day. Benefits club offering discounts on everyday services. Discounts at educational institutions. Reading kits for children through PlayKids. Remote-first work model , allowing employees to work from anywhere in Brazil. Option to work from São Paulo offices or partner coworking spaces up to twice per week. Inclusive and collaborative environment focused on innovation, professional development, and high-quality engineering.