Grupo QuintoAndar | Senior Software Engineer - IAM
On-siteSão Paulo, São Paulo, Brazil
Job Summary
Design, develop, and scale QuintoAndar's centralized Authentication and Authorization platforms while solving complex engineering challenges focused on scale, resilience, and low latency. Own the full software development lifecycle for IAM products, from definition through production maintenance, and handle incidents by troubleshooting, debugging, and creating post-mortems to prevent future occurrences. Collaborate cross-functionally with engineering teams and product managers to define secure service-to-service communication standards, while reinforcing adoption of good software development practices through design and code reviews. Mentor other engineers and actively monitor the health and performance of auth services to ensure millions of daily requests are processed securely.
Required Qualifications
- Strong IAM Fundamentals: Proven knowledge and practical experience with Authentication and Authorization concepts, protocols, and standards (e.g., OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, RBAC/ABAC)
- Software Engineering Expertise: Proficient in one or more programming languages commonly used in our stack (such as Java, Kotlin, or Go/Python)
- Architecture & API Design: Experience designing and evolving scalable software architecture from the ground up, and highly skilled in creating secure RESTful APIs
- Agile & Fundamentals: Proven experience with Agile development practices
- Solid software engineering fundamentals, including version control, testing, deployment automation, and design documentation
- Strong understanding of database design and evolution
- Experience with tools and practices for software monitoring, observability, and performance tracking
- Strong problem-solving skills and attention to detail
- Fluency in Portuguese and advanced English
Desired Qualifications
- Have experience designing, implementing, or migrating centralized Identity Providers (IdP) or fine-grained authorization systems (e.g., Zanzibar-based models, OPA)
- Have experience with cloud service platforms (AWS, GCP) and their native IAM/Security services
- Understand the challenges of Service-to-Service authentication (Workload Identity, mTLS, SPIFFE/SPIRE)
- Have experience mentoring a team of software engineers
- Know how to test and tune the scalability of highly concurrent, latency-sensitive distributed systems
- Have some knowledge on containers and container-orchestration (e.g., Kubernetes)
- Understand how modern CI/CD works and how to integrate security checks into pipelines
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.