Grupo QuintoAndar | Senior Software Engineer - IAM

Role overview

A senior software engineer position on the Identity and Access Management (IAM) team, the group responsible for centralized authentication and authorization platforms that underpin trust across a large multi-brand digital ecosystem. The work centers on building low-latency, fault-tolerant security systems handling millions of identity decisions every day. The role is fully remote within Brazil, with optional access to an office or partner coworking spaces a couple of times per week.

Responsibilities

- Design, develop, and scale centralized authentication (AuthN) and authorization (AuthZ) platforms that sit on the critical path of nearly every user interaction - Tackle complex distributed-systems problems focused on scale, resilience, fault tolerance, and low latency, since authorization checks run on every request - Partner with engineers, product managers, and security stakeholders to define paved-road patterns for secure service-to-service and user-to-service communication - Take end-to-end ownership of IAM products across definition, development, testing, deployment, and ongoing maintenance - Champion delivery quality through design and code reviews, reinforce solid engineering practices, and mentor other engineers - Operate the services day-to-day: monitor health and performance, debug issues, lead incident response, and write post-mortems that drive follow-up improvements

Requirements

- Proficiency in one or more backend languages such as Java, Kotlin, Go, or Python - Hands-on experience designing and evolving scalable software architectures, with strong skills building secure RESTful APIs - Solid Agile experience and engineering fundamentals, including version control, automated testing, deployment automation, and design documentation - Strong grasp of database design and evolution, plus experience with monitoring, observability, and performance tooling - Strong problem-solving skills with a structured, data-driven approach and attention to detail - Fluency in Portuguese and advanced English (code, documentation, tooling, and cross-regional collaboration are typically conducted in English)

Nice to have

- Experience designing, implementing, or migrating centralized identity providers, fine-grained authorization systems, or policy engines such as OPA or Zanzibar-style models - Familiarity with cloud IAM and security services on AWS or GCP, and with service-to-service authentication patterns like Workload Identity, mTLS, or SPIFFE/SPIRE - Prior mentorship of other software engineers - Tuning the scalability of highly concurrent, latency-sensitive distributed systems - Working knowledge of containers and orchestrators such as Kubernetes, and integrating security checks into modern CI/CD pipelines

Benefits and work setup

- Remote-first model; work from home anywhere in Brazil, with optional use of an office or partner coworking spaces up to twice per week - Health, dental, and life insurance - Profit sharing and competitive base pay - Meal allowance and home office allowance - Childcare subsidy and support for atypical parenthood situations, plus extended parental leave - Wellness benefits including a fitness platform subscription and an employee assistance program covering mental health, social, legal, and financial support - Days off on birthday, Mother's Day, and Father's Day - Discounts on everyday services and educational institutions, plus a children's reading kit benefit