Senior Software Engineer - IAM

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance.

Location & Remote Work

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

Hiring Process Stages

Our selection process currently lasts an average of 40 days, from application to completion of the assessment. Going through:

1. Application Review
2. Interview with Recruiters
3. Tech Screening with Engineering Team (Coding Interview)
4. Technicals Interviews (Architecture live cases)
5. Offer

About the Team

The IAM team is at the core of QuintoAndar's platform security. We build and maintain the systems that guarantee the right people and the right services have access to the right resources at the right time. We handle millions of authentication requests daily, and our services are the foundation of trust for the entire QuintoAndar ecosystem.

Responsibilities

These are the Senior Software Engineer responsibilities in the IAM team:

• Build Core Security Systems: Design, develop, and scale QuintoAndar's centralized Authentication (AuthN) and Authorization (AuthZ) platforms.
• Solve Complex Engineering Challenges: Succeed in a wide range of complex situations across multiple axes, focusing heavily on scale, resilience, fault tolerance, and low latency (auth checks happen on every request!).
• Collaborate Cross-Functionally: Work with other engineering teams, product managers, and the broader Security organization to define paved roads for secure service-to-service and user-to-service communication.
• Full Lifecycle Ownership: Be responsible for the entire software development lifecycle of IAM products: definition, development, testing, production deployment, and maintenance.
• Quality & Mentorship: Be a guardian of your team's delivery quality by reinforcing the adoption of good software development practices. Participate in design and code reviews, and mentor other software engineers.
• Operational Excellence: Handle incidents, troubleshoot, and debug software issues with a learning mindset. Create post-mortems and take actions to avoid similar incidents in the future. Actively monitor the health and performance of auth services.

Requirements

What we are looking for:

• Strong IAM Fundamentals: Proven knowledge and practical experience with Authentication and Authorization concepts, protocols, and standards (e.g., OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, RBAC/ABAC).
• Software Engineering Expertise: Proficient in one or more programming languages commonly used in our stack (such as Java, Kotlin, or Go/Python).
• Architecture & API Design: Experience designing and evolving scalable software architecture from the ground up, and highly skilled in creating secure RESTful APIs.
• Agile & Fundamentals: Proven experience with Agile development practices. Solid software engineering fundamentals, including version control, testing, deployment automation, and design documentation.
• Database & Observability: Strong understanding of database design and evolution. Experience with tools and practices for software monitoring, observability, and performance tracking.
• Problem Solving: Strong problem-solving skills and attention to detail; people that are seeking to learn and deliver real impact through high-quality data-driven and structured software.
• Languages: Fluency in Portuguese and advanced English - we usually use English to write our code, documentation, tools, reference materials, and eventually talk to partners and co-workers from other countries.

You´ll stand out if you:

• Have experience designing, implementing, or migrating centralized Identity Providers (IdP) or fine-grained authorization systems (e.g., Zanzibar-based models, OPA).
• Have experience with cloud service platforms (AWS, GCP) and their native IAM/Security services.
• Understand the challenges of Service-to-Service authentication (Workload Identity, mTLS, SPIFFE/SPIRE).
• Have experience mentoring a team of software engineers.
• Know how to test and tune the scalability of highly concurrent, latency-sensitive distributed systems.
• Have some knowledge on containers and container-orchestration (e.g., Kubernetes).
• Understand how modern CI/CD works and how to integrate security checks into pipelines.

Important

Our hiring process starts with the application! If you truly want to be part of our team, please complete this step of the process. We analyze all candidates individually and provide feedback to all applicants. All communication will be conducted via email, so please stay tuned for our messages and release the domain @quintoandar.com.br to ensure our emails are not sent to spam.

Benefits

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.