Grupo QuintoAndar | Senior Software Engineer - IAM

QuintoAndar; São Paulo; Híbrido; BRL 180 000 - 300 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary

Profit sharing

Meal allowance

Health insurance

Dental plan

Life insurance

Home office allowance

Employee assistance program

Extended parental leave

Resumo da oferta

QuintoAndar in Brazil is seeking a senior IAM engineer to design and scale centralized authentication and authorization platforms. You will tackle high-volume security challenges, work with multiple teams, and shape secure service-to-service and user-to-service interactions.

You will mentor engineers, contribute to secure software practices, and help ensure resilient, low-latency identity services across the fintech-driven housing ecosystem.

Qualificações

• Proven knowledge of IAM concepts, protocols, and standards (OAuth 2.0, OIDC, SAML, SCIM, JWT, RBAC/ABAC).
• Proficient in programming languages like Java, Kotlin, Go, or Python.
• Experience designing scalable, secure RESTful APIs and cloud IAM services.

Responsabilidades

• Build and scale centralized AuthN/AuthZ platforms for QuintoAndar.
• Address scale, resilience, low latency, and secure service-to-service auth.
• Collaborate with product, security, and engineering teams to ensure secure delivery.
• Own the full lifecycle of IAM products from design to production and maintenance.
• Mentor engineers and uphold high engineering standards and code quality.

Conhecimentos

IAM fundamentals

OAuth 2.0

OIDC

SAML

Kubernetes

Java/Kotlin/Go/Python

RESTful APIs

Agile & DevOps

Cloud platforms AWS/GCP

Portuguese & English

Formação académica

Bachelor's degree in CS or related field

Ferramentas

Kubernetes

CI/CD tooling

Security monitoring tools

Descrição da oferta de emprego

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.
With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.
Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.

Location & Remote Work

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

Hiring Process Stages

• Application Review
• Interview with Recruiters
• Tech Screening with Engineering Team (Coding Interview)
• Technical Interviews (Architecture live cases)
• Offer

About the Team

The IAM team is at the core of QuintoAndar's platform security. We build and maintain the systems that guarantee the right people and the right services have access to the right resources at the right time. We handle millions of authentication requests daily, and our services are the foundation of trust for the entire QuintoAndar ecosystem.

Responsibilities

• Build Core Security Systems: Design, develop, and scale QuintoAndar's centralized Authentication (AuthN) and Authorization (AuthZ) platforms.
• Solve Complex Engineering Challenges: Succeed in a wide range of complex situations across multiple axes, focusing heavily on scale, resilience, fault tolerance, and low latency (auth checks happen on every request!).
• Collaborate Cross-Functionally: Work with other engineering teams, product managers, and the broader Security organization to define paved roads for secure service-to-service and user-to-service communication.
• Full Lifecycle Ownership: Be responsible for the entire software development lifecycle of IAM products: definition, development, testing, production deployment, and maintenance.
• Quality & Mentorship: Be a guardian of your team's delivery quality by reinforcing the adoption of good software development practices. Participate in design and code reviews, and mentor other software engineers.
• Operational Excellence: Handle incidents, troubleshoot, and debug software issues with a learning mindset. Create post-mortems and take actions to avoid similar incidents in the future. Actively monitor the health and performance of auth services.

Requirements

What we are looking for:

• Strong IAM Fundamentals: Proven knowledge and practical experience with Authentication and Authorization concepts, protocols, and standards (e.g., OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, RBAC/ABAC).
• Software Engineering Expertise: Proficient in one or more programming languages commonly used in our stack (such as Java, Kotlin, or Go/Python).
• Architecture & API Design: Experience designing and evolving scalable software architecture from the ground up, and highly skilled in creating secure RESTful APIs.
• Agile & Fundamentals: Proven experience with Agile development practices. Solid software engineering fundamentals, including version control, testing, deployment automation, and design documentation.
• Database & Observability: Strong understanding of database design and evolution. Experience with tools and practices for software monitoring, observability, and performance tracking.
• Problem Solving: Strong problem-solving skills and attention to detail; people that are seeking to learn and deliver real impact through high-quality data-driven and structured software.
• Languages: Fluency in Portuguese and advanced English - we usually use English to write our code, documentation, tools, reference materials, and eventually talk to partners and co‑workers from other countries.

You´ll stand out if you:

• Have experience designing, implementing, or migrating centralized Identity Providers (IdP) or fine-grained authorization systems (e.g., Zanzibar-based models, OPA).
• Have experience with cloud service platforms (AWS, GCP) and their native IAM/Security services.
• Understand the challenges of Service-to-Service authentication (Workload Identity, mTLS, SPIFFE/SPIRE).
• Have experience mentoring a team of software engineers.
• Know how to test and tune the scalability of highly concurrent, latency-sensitive distributed systems.
• Have some knowledge on containers and container-orchestration (e.g., Kubernetes).
• Understand how modern CI/CD works and how to integrate security checks into pipelines.

Benefits

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother's Day, and Father's Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutionsReading kit for children – PlayKids

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!
You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.