Senior Software Engineer - Endpoint Security

Jobgether; Brasil; Remote; BRL 350,000 - 600,000; Full time

Job summary

Jobgether is seeking a Senior Software Engineer – Endpoint Security in Brazil to design, build, and maintain security infrastructure protecting corporate systems and data. You will work at the intersection of endpoint security, device management, and Zero Trust architecture, automating configurations and integrating security controls into CI/CD pipelines.

You will own the full software development lifecycle for internal security tools, collaborate with DevOps and IT operations, and mentor junior

Qualifications

• Proven experience with endpoint security and modern device management frameworks.
• Strong understanding of Zero Trust Network Access (ZTNA) and device posture assessments.
• Experience using Infrastructure as Code tools to automate configurations.

Responsibilities

• Design, build, and maintain endpoint security infrastructure to protect corporate data and ensure access only from authorized devices.
• Automate security platforms and device management with IaC (Terraform/OpenTofu).
• Automate deployment of service accounts, groups, policies, and access across Google Workspace and other platforms.
• Design and implement granular ZTNA policies based on identity and device posture.
• Mentor junior engineers and contribute to technical knowledge sharing.

Skills

Endpoint security

ZTNA

Terraform

OpenTofu

Security automation

Tools

Intune

Kandji

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Software Engineer – Endpoint Security based in Brazil.

The Senior Software Engineer will help build and maintain the security infrastructure that protects corporate systems, devices, and sensitive data. You will work at the intersection of endpoint security, device management, and Zero Trust architecture, ensuring that access is granted only to authorized and compliant devices. The role combines software engineering, security automation, and infrastructure management across a diverse endpoint environment. You will design scalable security platforms, automate configurations through Infrastructure as Code, and integrate security controls into engineering workflows. Working closely with DevOps, IT Operations, and software engineering teams, you will balance strong security standards with a smooth employee and developer experience. This is an opportunity to take ownership of critical security systems while contributing to technical excellence and continuous improvement in a remote-first environment.

Accountabilities

• Design, build, and maintain foundational endpoint security infrastructure to protect corporate data and ensure access is limited to authorized, secure, and compliant devices.
• Architect and automate security platforms, endpoint management systems, and collaboration tools using Infrastructure as Code (IaC), particularly Terraform and OpenTofu.
• Automate the configuration and deployment of service accounts, user groups, browser policies, and application access across platforms such as Google Workspace.
• Design, implement, and optimize granular Zero Trust Network Access (ZTNA) policies based on user identity and device security posture.
• Develop secure, clientless access solutions for partner networks and establish resilient corporate network authentication mechanisms, including 802.1X through private certificate authorities.
• Build automated endpoint protection workflows covering device health attestation, operating system and application patch management, application allowlists, and browser hardening.
• Improve mobile device security by streamlining automated Mobile Device Management (MDM) enrollment for Bring Your Own Device (BYOD) environments.
• Collaborate with DevOps, IT Operations, and software engineering teams to integrate security controls and device posture checks into developer workflows and automated CI/CD pipelines.
• Own the full software development lifecycle for internal security tools, automated integrations, and custom endpoint applications, from requirements gathering and architecture through testing, deployment, and monitoring.
• Promote engineering quality through clean, maintainable, and well‑tested code, effective design patterns, and participation in technical and code reviews.
• Mentor junior and mid‑level engineers and contribute to technical knowledge sharing and team development.
• Maintain system reliability through robust observability and SIEM integrations, including platforms such as Google SecOps.
• Troubleshoot complex issues across hardware, networks, and SaaS integrations, contribute to incident resolution, and develop automated remediation processes.

Requirements:

• Proven experience with endpoint security and modern device management frameworks, including Apple MDM and Windows Configuration Service Providers (CSPs).
• Hands-on experience with modern MDM platforms such as Microsoft Intune and Kandji.
• Strong understanding of Zero Trust Network Access (ZTNA), device posture assessments, and device health attestation techniques.
• Demonstrated experience managing infrastructure, configurations, or security environments as code using Terraform, OpenTofu, or Terragrunt.
• Experience designing and evolving scalable software architectures and integrating with RESTful APIs.
• Understanding of cloud infrastructure platforms such as AWS or Google Cloud Platform (GCP).
• Familiarity with directory services and Identity Providers (IdPs), such as Google Workspace, Microsoft Entra ID, or Okta.
• Experience working in Agile development environments, including Scrum or Kanban.
• Strong computer science fundamentals, including data structures, algorithms, and secure software design patterns.
• Excellent analytical and problem‑solving skills, with the ability to investigate complex technical issues involving multiple devices, networks, and integrations.
• Fluency in Portuguese and advanced or fluent English proficiency, both required for collaboration with international colleagues and suppliers.