Tech Lead FullStack

Jobgether SRL; Brasil; On-site; BRL 180,000 - 300,000; Full time

Benefits offered by this job

Health and dental insurance

Meal and food allowances

Childcare assistance

Extended parental leave

Wellhub/TotalPass health resources

Job summary

Lever, Inc. is seeking a Tech Lead FullStack in Brazil to drive authentication, authorization, and observability across a multi-tenant platform. You will shape secure identity solutions, working across frontend and backend, with hands-on coding and architectural discovery.

You will collaborate with infra and product teams in a remote-first setup, helping evolve legacy services while enabling modern migrations and identity provider integrations.

Qualifications

• Demonstrated full-stack experience with strong frontend skills in React, TypeScript, Next.js and backend in Node.js or Java/Kotlin.
• Practical knowledge of authentication/authorization concepts: OAuth2, OIDC, RBAC.
• Hands-on experience with identity providers (Auth0, Keycloak, Okta, Entra ID, Azure B2C).
• Experience with messaging and event-driven systems (Kafka or equivalent).
• Observability tools: SigNoz, Prometheus, Grafana.
• Cloud experience with AWS or Azure and Docker.
• Git and CI/CD (GitHub Actions).
• Comfort using AI-powered development tools to support refinement and coding.

Responsibilities

• Develop and evolve the Authentication & Authorization module using OAuth2 in a multi-tenant architecture.
• Maintain existing authentication flows and support migrations for customers.
• Manage user and role services during platform modernization.
• Integrate identity providers into new services and support data migration.
• Implement observability: metrics, logging, dashboards, and monitoring.
• Prototype integrations with Auth0, Keycloak, Okta, Entra ID, or Azure B2C.
• Collaborate with infra to connect modules to central portal and identity platform.
• Participate in technical discovery and planning for platform capabilities.
• Document architectural decisions and maintain shared ownership across cloud infra and products.

Skills

React

TypeScript

Next.js

Node.js

Java/Kotlin

OAuth2/OIDC

RBAC

Kafka

Observability

AI-assisted development tools

SoD/OpenFGA

Tools

Docker

Kubernetes

GitHub Actions

AWS

Azure

GitOps

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Tech Lead FullStack based in Brazil.

This role offers the opportunity to lead the development and evolution of critical authentication, authorization, and observability capabilities within a modern multi-tenant platform. You will work across frontend and backend technologies while helping shape secure and scalable identity solutions. The position combines hands-on engineering with technical discovery, architecture, and integration work. You will contribute to OAuth2/OIDC-based authentication, enterprise federation, role management, and identity provider integrations. The role also involves supporting legacy services during a gradual modernization journey, ensuring continuity for existing customers. You will collaborate closely with infrastructure and product teams in a remote-first environment where AI-assisted development and engineering excellence are encouraged.

Accountabilities

• Develop and evolve the Authentication & Authorization module using OAuth2, including centralized login, product-level role definitions, and enterprise OIDC federation within a multi-tenant architecture.
• Maintain and support existing authentication flows and services, ensuring compatibility for customers who have not yet migrated to the new architecture.
• Maintain user and role management services while ensuring stability during the transition to the new platform model.
• Integrate users and roles from the selected identity provider, such as Keycloak or Auth0, into new services and support identity-data synchronization and migration between legacy and modern models.
• Implement observability across the modules, including metrics, logging, dashboards, and monitoring capabilities.
• Evaluate and prototype integrations with identity providers such as Auth0, Keycloak, Okta, Entra ID, and Azure B2C to support the selection of a centralized identity platform.
• Integrate delivered modules with the central portal and identity platform in collaboration with infrastructure teams.
• Participate in technical discovery, refinement, and planning for upcoming platform capabilities and improvements.
• Document architectural and technical decisions while ensuring services remain aligned with a shared-ownership model across cloud infrastructure and individual products.

Requirements:

• Demonstrated experience in full-stack development, with strong frontend skills in React, TypeScript, and Next.js and backend experience with Node.js, Java, or Kotlin.
• Practical knowledge of authentication and authorization concepts, including OAuth2, OIDC, and RBAC.
• Hands-on experience with identity providers such as Auth0, Keycloak, Okta, Entra ID, or Azure B2C.
• Experience working with messaging and event-driven systems, particularly Kafka or an equivalent technology.
• Comfortable working within codebases where legacy and modern versions coexist, supporting gradual migrations without disrupting existing customers.
• Familiarity with observability technologies such as SigNoz, Prometheus, and Grafana.
• Experience with at least one public cloud provider, such as AWS or Azure, as well as practical Docker experience.
• Proficiency with Git and CI/CD pipelines, particularly GitHub Actions.
• Comfortable using AI-powered development tools, such as Claude Code, custom skills, and agents, to support technical refinement, documentation, feature development, and coding.
• Strong problem-solving, technical communication, collaboration, and documentation skills, with the ability to contribute to technical discovery and make informed engineering decisions.
• Knowledge of Segregation of Duties (SoD) and/or OpenFGA for fine-grained authorization is considered an advantage.
• Experience with Kubernetes, GitOps concepts, Anticorruption Layer patterns, and Factory/Strategy patterns for interchangeable identity providers is a plus.
• If you reside in the Campinas Metropolitan Region, availability to work from the local offices is required in accordance with the applicable attendance policy.

Benefits:

• Health and dental insurance.
• Meal and food allowances.
• Childcare assistance.
• Extended parental leave.
• Access to fitness, wellness, and healthcare professionals through Wellhub and TotalPass partnerships.
• Profit Sharing and Results (PLR).
• Life insurance.
• Continuous learning opportunities through an internal learning platform.
• Access to online courses and language-learning platforms.
• Discounts through partner programs.
• Online resources dedicated to physical health, mental health and overall well-being.
• Pregnancy and responsible-parenthood support and courses.
• Opportunities to work with modern technologies, AI-assisted development, cloud platforms, identity management, and large-scale platform modernization.
• Remote work environment, subject to the applicable office attendance requirements for employees in the Campinas Metropolitan Region.