Tech Lead FullStack

Accountabilities: Develop and evolve the Authentication & Authorization module using OAuth2, including centralized login, product-level role definitions, and enterprise OIDC federation within a multi-tenant architecture. Maintain and support existing authentication flows and services, ensuring compatibility for customers who have not yet migrated to the new architecture. Maintain user and role management services while ensuring stability during the transition to the new platform model. Integrate users and roles from the selected identity provider, such as Keycloak or Auth0, into new services and support identity-data synchronization and migration between legacy and modern models. Implement observability across the modules, including metrics, logging, dashboards, and monitoring capabilities. Evaluate and prototype integrations with identity providers such as Auth0, Keycloak, Okta, Entra ID, and Azure B2C to support the selection of a centralized identity platform. Integrate delivered modules with the central portal and identity platform in collaboration with infrastructure teams. Participate in technical discovery, refinement, and planning for upcoming platform capabilities and improvements. Document architectural and technical decisions while ensuring services remain aligned with a shared-ownership model across cloud infrastructure and individual products. Requirements: Demonstrated experience in full-stack development, with strong frontend skills in React, TypeScript, and Next.js and backend experience with Node.js, Java, or Kotlin. Practical knowledge of authentication and authorization concepts, including OAuth2, OIDC, and RBAC. Hands-on experience with identity providers such as Auth0, Keycloak, Okta, Entra ID, or Azure B2C. Experience working with messaging and event-driven systems, particularly Kafka or an equivalent technology. Comfortable working within codebases where legacy and modern versions coexist, supporting gradual migrations without disrupting existing customers. Familiarity with observability technologies such as SigNoz, Prometheus, and Grafana. Experience with at least one public cloud provider, such as AWS or Azure, as well as practical Docker experience. Proficiency with Git and CI/CD pipelines, particularly GitHub Actions. Comfortable using AI-powered development tools, such as Claude Code, custom skills, and agents, to support technical refinement, documentation, feature development, and coding. Strong problem-solving, technical communication, collaboration, and documentation skills, with the ability to contribute to technical discovery and make informed engineering decisions. Knowledge of Segregation of Duties (SoD) and/or OpenFGA for fine-grained authorization is considered an advantage. Experience with Kubernetes, GitOps concepts, Anticorruption Layer patterns, and Factory/Strategy patterns for interchangeable identity providers is a plus. If you reside in the Campinas Metropolitan Region, availability to work from the local offices is required in accordance with the applicable attendance policy. Benefits: Health and dental insurance. Meal and food allowances. Childcare assistance. Extended parental leave. Access to fitness, wellness, and healthcare professionals through Wellhub and TotalPass partnerships. Profit Sharing and Results (PLR). Life insurance. Continuous learning opportunities through an internal learning platform. Access to online courses and language-learning platforms. Discounts through partner programs. Online resources dedicated to physical health, mental health, and overall well-being. Pregnancy and responsible-parenthood support and courses. Opportunities to work with modern technologies, AI-assisted development, cloud platforms, identity management, and large-scale platform modernization. Remote work environment, subject to the applicable office attendance requirements for employees in the Campinas Metropolitan Region.