Grupo QuintoAndar | Senior Software Engineer
Job description
About the role
The team owns the centralized Authentication and Authorization platforms that underpin trust across the entire ecosystem. You will architect and operate the foundational identity and access layers that secure every interaction within the business. Your work will directly determine how users and services prove who they are and what they are allowed to do. You will partner closely with product and engineering teams to translate security and compliance needs into robust technical solutions. This role demands a mindset focused on reliability, where availability and performance are non-negotiable priorities. You will influence strategic technical decisions that shape the future of the platform. Success in this position means the ecosystem can scale securely without compromising user experience.
Key facts
What you'll do
Ensure high availability, low latency, and resilience so that auth checks support every request across the platform.
Champion delivery quality by enforcing strong software practices, participating in design and code reviews, and mentoring other engineers.
Handle incidents, perform troubleshooting, create post-mortems, and implement preventive actions to improve service reliability.
Monitor the health and performance of authentication services continuously.
Design, implement, or migrate centralized Identity Providers and fine-grained authorization systems, for example using Zanzibar-like models or OPA.
Operate cloud platforms such as AWS or GCP and leverage their native IAM and security services.
Understand Service-to-Service authentication challenges including Workload Identity, mTLS, and standards like SPIFFE/SPIRE.
Model and evolve databases while using monitoring, observability, and performance tracking tools effectively.
Solve problems with attention to detail, using data-driven and structured approaches to deliver real impact.
Integrate security checks into CI/CD pipelines.
Test and tune the scalability of highly concurrent, latency-sensitive distributed systems.
Work with containers and container orchestration such as Kubernetes.
Communicate fluently in Portuguese and advanced English, since code, documentation, and collaboration often occur in English.
Requirements
Demonstrate proven knowledge and hands-on experience with Authentication and Authorization concepts, protocols, and standards such as OAuth 2.0, OpenID Connect, SAML, SCIM, JWT, and RBAC/ABAC.
Write robust software using one or more languages common to the stack, such as Java, Kotlin, Go, or Python.
Architect scalable systems from the ground up and design secure RESTful APIs.
Apply Agile practices consistently and uphold core software engineering fundamentals including version control, testing, deployment automation, and documentation.
Model and evolve databases while using monitoring, observability, and performance tracking tools effectively.
Solve problems with attention to detail, using data-driven and structured approaches to deliver real impact.
Communicate fluently in Portuguese and advanced English, since code, documentation, and collaboration often occur in English.
Bachelor's degree is required.
Nice to have
Design, implement, or migrate centralized Identity Providers and fine-grained authorization systems, for example using Zanzibar-like models or OPA.
Operate cloud platforms such as AWS or GCP and leverage their native IAM and security services.
Understand Service-to-Service authentication challenges including Workload Identity, mTLS, and standards like SPIFFE/SPIRE.
Mentor a team of software engineers.
Test and tune the scalability of highly concurrent, latency-sensitive distributed systems.
Work with containers and container orchestration such as Kubernetes.
Integrate security checks into CI/CD pipelines.
Practical notes
The hiring process averages 40 days from application to assessment completion, including recruiter screening, tech screens, architecture interviews, and offer evaluation.
Use the @quintoandar.com.br domain and monitor your email so communications are not filtered as spam.
Typical interview steps
Hiring for engineering roles usually starts with a recruiter screen, followed by one or two technical rounds. Candidates often solve a coding problem, discuss past projects, and answer system design questions. Some loops include a take-home task. Final rounds typically cover team fit and give candidates a chance to ask questions. Interviewers look for how you break down an unfamiliar problem, not just whether you reach the answer. Practicing a few problems aloud and reviewing your own past projects are the best preparation.
Good to know
Work in a Latin American real estate ecosystem focused on transforming the housing journey through technology.
Use modern tools for distributed systems, observability, and security to build reliable platforms.
Engage with a diverse team in an inclusive environment that welcomes diverse backgrounds and characteristics.
Benefit from competitive compensation, profit sharing, and a range of perks such as meal allowances, health and dental insurance, childcare support, and learning resources.
Work under a remote-first model with flexibility for home-based arrangements and limited office options.