Skip to content

Jobgether

Senior Software Engineer - IAM

Location
Brazil, BR
Arrangement
Remote
Employment type
Full-time
Level
Senior
Posted
25 September 2026 (5 days ago)

Checked 5 days agoApplications go to the employer, never to RoleSprint

About this role

Accountabilities: • Design, develop, and scale centralized Authentication (AuthN) and Authorization (AuthZ) platforms that serve as core security infrastructure.

• Solve complex engineering challenges involving high scale, resilience, fault tolerance, concurrency, and low latency , where authorization checks are part of virtually every request.

• Collaborate with engineering teams, product managers, and security specialists to establish secure and scalable patterns for user-to-service and service-to-service communication .

• Own the full software development lifecycle for IAM products, including requirements definition, architecture, development, testing, deployment, monitoring, maintenance, and continuous improvement.

• Design and evolve secure, scalable software architectures and RESTful APIs .

• Participate in architecture discussions, technical design reviews, and code reviews while reinforcing high standards for software quality and engineering practices.

• Monitor the health, performance, and reliability of authentication and authorization services, proactively identifying and resolving potential issues.

• Respond to production incidents, troubleshoot complex software problems, conduct post-mortems, and implement improvements to prevent recurring incidents.

• Mentor other software engineers and contribute to a culture of knowledge sharing, technical excellence, and continuous learning.

• Partner across teams to improve developer experience, security practices, reliability, and the overall quality of IAM services.

Requirements:

• Proven professional experience as a Senior Software Engineer or in a comparable software engineering role, with strong expertise in identity, access, or security-related systems.

• Strong practical understanding of Authentication and Authorization concepts, protocols, and standards such as OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, RBAC, and ABAC .

• Proficiency in one or more programming languages commonly used for backend development, such as Java, Kotlin, Go, or Python .

• Experience designing and evolving scalable software architectures from the ground up, with strong expertise in building secure and reliable RESTful APIs .

• Solid software engineering fundamentals, including version control, automated testing, deployment automation, technical documentation, and Agile development practices .

• Strong understanding of database design and evolution , as well as experience with monitoring, observability, and application performance management.

• Experience working with highly available and distributed systems, with a structured approach to solving complex technical problems.

• Strong attention to detail, ownership, communication, collaboration, and a demonstrated ability to learn and deliver meaningful impact through high-quality engineering.

• Fluency in Portuguese and advanced English , with the ability to communicate effectively with international colleagues and partners.

• Experience with centralized Identity Providers (IdPs) or fine-grained authorization systems such as Zanzibar-based models or OPA is a plus.

• Familiarity with AWS or GCP and their native IAM and security services is an advantage.

• Understanding of service-to-service authentication concepts such as Workload Identity, mTLS, SPIFFE, and SPIRE is a plus.

• Experience mentoring software engineers and helping teams improve their technical practices is desirable.

• Knowledge of testing and tuning highly concurrent, latency-sensitive distributed systems is advantageous.

• Familiarity with containers, Kubernetes, and modern CI/CD pipelines , including integrating security checks into delivery workflows, is a plus.

Benefits:

• Competitive salary.

• Profit-sharing program.

• Meal allowance.

• Health insurance.

• Dental plan.

• Life insurance.

• Childcare and atypical parenthood subsidies.

• Wellhub membership.

• Home-office allowance.

• Employee assistance program providing mental health, social, legal, and financial support.

• Extended parental leave.

• Additional days off for birthdays, Mother's Day, and Father's Day.

• Benefits club offering discounts on everyday services.

• Discounts at educational institutions.

• Reading kits for children through PlayKids.

• Remote-first work model , allowing employees to work from anywhere in Brazil.

• Option to work from São Paulo offices or partner coworking spaces up to twice per week.

• Inclusive and collaborative environment focused on innovation, professional development, and high-quality engineering.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

Work location

  • BR

Related jobs

Ready to make a decision?

This role is either worth your time or it isn’t.

Analyze the posting against your experience, see the gaps clearly, and build the right materials only if the opportunity makes sense.

Nothing is submitted automatically. You choose what happens next.

About this listing

Published on Lever under the board identifier Jobgether, which is the name the employer’s own job board carries. RoleSprint has not verified the company’s registered or trading name, so it is shown exactly as published rather than tidied up.

RoleSprint is not the employer and not a recruiter. Applications are made on the employer’s own site and never reach us; what RoleSprint does is help you decide whether a role is worth your time and prepare for it if it is.

Published 25 September 2026, last checked 5 days ago. A posting stops being advertised here 90 days after the employer published it, and one the employer takes down is marked closed rather than quietly removed.

More searches like this one

Browse all current openings

No credit card requiredStart free