Senior Software Engineer - Endpoint Security

Requirements

What we are looking for:

• Strong Endpoint Security & Zero Trust Fundamentals: Proven experience with device management frameworks (Apple MDM, Windows CSPs) and modern MDM tools (Microsoft Intune, Kandji). Strong understanding of ZTNA frameworks, device posture assessments, and health attestation techniques.
• Infrastructure as Code (IaC) Experience: Demonstrated experience managing infrastructure, configurations, or security setups as code (using Terraform, OpenTofu, or Terragrunt).
• Architecture & API Design: Experience designing and evolving scalable software architecture and consuming RESTful APIs. Understanding of cloud infrastructure (AWS or GCP) and directory services/IdPs (Google Workspace, Entra ID, or Okta).
• Agile & Computer Science Fundamentals: Proven experience in Agile development environments (Scrum or Kanban) and solid computer science fundamentals, including data structures, algorithms, and secure design patterns.
• Problem Solving: Strong analytical skills with the ability to troubleshoot complex, multi-layered technical issues across different devices, networks, and integrations.
• Languages: Fluency in Portuguese and advanced/fluent English.

You'll stand out if you:

• Have hands-on experience with Zscaler solutions (ZPA, ZIA, ZDX, ZIdentity) or other enterprise ZTNA vendors.
• Have understanding of relational database design (SQL) and experience with observability, logging, and monitoring systems (such as Datadog, Prometheus, ELK, or SIEM platforms like Google SecOps).
• Have proficiency in one or more modern programming languages (such as Python, Go, Java, or Kotlin) to write clean, maintainable, and well-tested automation code and API integrations.
• Have experience automating Google Workspace domains, policies, and Service Accounts via IaC.
• Understand the deep integration of device health posture signaling with Identity Providers like Okta.
• Have experience with cloud-based certificate authorities or private PKI.
• Know how to integrate automated security checks into modern CI/CD pipelines.

Modelo 100% remoto em todo o Brasil. Há preferência por pessoas residentes em Belo Horizonte/MG ou São Paulo/SP devido a encontros de integração a cada 2 ou 3 meses.