5 days ago
Remote, BrazilStaff+
Responsibilities
- Own the technical vision, architecture, roadmap, and migration strategy for the authentication and authorization platform, API auth gateway, and identity services.
- Design, build, and operate scalable, highly available gateway and identity services primarily in Golang using AWS and relational databases.
- Lead phased zero-downtime migrations with rollback and safety mechanisms.
- Establish authentication and authorization standards covering OAuth2, OpenID Connect, token lifecycle management, service-to-service authentication, RBAC, ABAC, and policy engines.
- Drive consistency, performance, reliability, observability, and security across distributed microservices and edge services.
- Partner with Security and Compliance on fintech-grade security and regulatory requirements and promote secure-by-default engineering practices.
- Improve engineering practices for observability, security, and CI/CD across teams.
- Participate in on-call rotation and lead incident response and postmortems for auth-critical services.
- Mentor engineers, influence technical direction, translate business goals into roadmaps, and lead complex cross-team initiatives.
- Model effective use of AI-assisted development tools on security-sensitive systems.
Requirements
- 12+ years of professional software engineering experience, including significant backend experience.
- Recent experience deploying significant production application changes within the past 30 days.
- Deep hands-on expertise with authentication and authorization systems, including OAuth2, OpenID Connect, SAML, JWT, session-based authentication, token lifecycle management, RBAC, ABAC, and policy-as-code.
- Experience designing, building, or operating an API gateway or authentication proxy at scale, such as Kong, Envoy, AWS API Gateway, or Traefik.
- Proven experience leading large-scale service extraction or migration with zero or minimal customer impact.
- Strong Golang proficiency and experience building and maintaining RESTful APIs.
- Expertise with SQL-based relational databases, including MySQL and PostgreSQL, and performance optimization of schemas and queries.
- Understanding of distributed systems patterns, event-driven architecture, queues, and high-throughput, low-latency edge services.
- Ability to influence decisions, advance new ideas, and lead complex initiatives across multiple teams.
- Current hands-on use of AI development tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Bachelor’s degree in Computer Science or a similar technical field.
- Preferred experience with identity platforms such as Keycloak, Auth0, Okta, Ory, or in-house identity providers; fine-grained authorization; service mesh and edge technologies; threat modeling; observability tools; AWS Aurora RDS; fintech or payments; PCI-DSS or SOC 2; Docker; Kubernetes; CI/CD; commercial APIs; and platform infrastructure.
- Preferred track record of guiding technical direction, improving reliability, and scaling engineering organizations.
Benefits
- Fully remote work arrangement with no relocation or commute required.
- Full-time principal-level role with ownership at a growing fintech company.
- Opportunities for career advancement, technical leadership, mentoring, and cross-functional impact.
- Company culture includes employees with interests such as music, yoga, cycling, cooking, golf, dogs, and rock climbing.
Tech Stack
AmbassadorAWSDatadogDockerElasticsearchGitGoGrafanaIstioKubernetesMySQLPostgreSQLPrometheusPythonReactReact NativeTypeScript
