Grupo QuintoAndar | Senior Software Engineer

Grupo QuintoAndar | Senior Software Engineer (Identity & Access)

Location: Remote-first (Brazil). Our technology team operates with a remote-first model; work from anywhere in Brazil, with optional in-person at São Paulo offices or coworking spaces up to twice a week.

Overview

Join Grupo QuintoAndar's core engineering team to build and evolve Customer Identity and Access Management (CIAM) capabilities. As a Senior Software Engineer on the Identity Platform team, you will design, develop, and maintain secure, scalable identity systems and services that manage how customers access our services.

Responsibilities

• Design, develop, and operate core identity services, focusing on authentication, authorization, user management, and security.
• Implement and maintain CIAM functionalities such as user registration, login flows (MFA, social logins, passwordless options), profile management, session management, and consent management.
• Develop and maintain integrations with internal applications and external partners using OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Ensure security, reliability, scalability, and performance of the identity platform and its microservices.
• Collaborate with product managers, security teams, and other engineers to define identity requirements and deliver a seamless, secure user experience.
• Improve development tooling, test coverage (especially for security and identity flows), and code structure within the identity platform.
• Participate in software design discussions for identity components and contribute to clear documentation.

Requirements

• Strong proficiency in Java with frameworks such as Spring Boot and Spring Security.
• Experience in Identity and Access Management (IAM), with preference for CIAM.
• Knowledge of identity protocols: OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Experience designing, building, and consuming RESTful APIs for identity and user management.
• Familiarity with JSON Web Tokens (JWT) in authentication/authorization flows.
• Experience with relational (SQL) and NoSQL databases for identity data.
• Solid understanding of security principles and best practices (e.g., OWASP Top 10).
• Desire to learn and deliver high-quality, secure software with a focus on work-life balance.
• Excellent English skills (verbal and written) for documentation and collaboration.

Nice to have

• Hands-on experience with identity platforms/providers (e.g., ForgeRock, Okta, Ping Identity, Keycloak, Auth0, AWS Cognito, GCP Identity Platform) or Spring Security for complex identity scenarios.
• Computer science fundamentals in algorithms and distributed systems as applied to scalable identity solutions.
• Experience with cloud services and identity-related offerings; familiarity with CI/CD practices, containers, and orchestration.
• Experience testing, performance tuning, and ensuring scalability of identity systems, including MFA factors (MFA, TOTP, WebAuthn).
• Understanding of data privacy regulations (LGPD, GDPR) and implications for CIAM.
• Awareness that identity work is ongoing and requires continuous evolution of critical services.

Benefits

• Competitive salary
• Profit sharing
• Variable compensation (Somente para vagas comerciais)
• Meal allowance
• Health and dental insurance
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Discounts via Benefits Club and educational institutions
• Reading kit for children – PlayKids

Diversity & Inclusion

We value diversity and welcome applicants from all backgrounds. All job openings are open to all individuals regardless of age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. Information collected in the application may be used to monitor inclusion practices and, for affirmative action roles, to align with target audiences. Data usage complies with applicable laws and is handled with care.

Privacy and Data Protection

We operate in compliance with privacy and data protection laws, including LGPD. Our Privacy Notice for Candidates explains data handling and rights. For questions or to exercise your rights, contact our Service Channel.

Company

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Design, IT
• Industries: Software Development

#J-18808-Ljbffr

---