Tech Lead FullStack

Accountabilities

• Develop and evolve the Authentication & Authorization module using OAuth2, including centralized login, product-level role definitions, and enterprise OIDC federation within a multi-tenant architecture.

• Maintain and support existing authentication flows and services, ensuring compatibility for customers who have not yet migrated to the new architecture.

• Maintain user and role management services while ensuring stability during the transition to the new platform model.

• Integrate users and roles from the selected identity provider, such as Keycloak or Auth0, into new services and support identity-data synchronization and migration between legacy and modern models.

• Implement observability across the modules, including metrics, logging, dashboards, and monitoring capabilities.

• Evaluate and prototype integrations with identity providers such as Auth0, Keycloak, Okta, Entra ID, and Azure B2C to support the selection of a centralized identity platform.

• Integrate delivered modules with the central portal and identity platform in collaboration with infrastructure teams.

• Participate in technical discovery, refinement, and planning for upcoming platform capabilities and improvements.

• Document architectural and technical decisions while ensuring services remain aligned with a shared-ownership model across cloud infrastructure and individual products.

Requirements:

• Demonstrated experience in full-stack development, with strong frontend skills in React, TypeScript, and Next.js and backend experience with Node.js, Java, or Kotlin.

• Practical knowledge of authentication and authorization concepts, including OAuth2, OIDC, and RBAC.

• Hands-on experience with identity providers such as Auth0, Keycloak, Okta, Entra ID, or Azure B2C.

• Experience working with messaging and event-driven systems, particularly Kafka or an equivalent technology.

• Comfortable working within codebases where legacy and modern versions coexist, supporting gradual migrations without disrupting existing customers.

• Familiarity with observability technologies such as SigNoz, Prometheus, and Grafana.

• Experience with at least one public cloud provider, such as AWS or Azure, as well as practical Docker experience.

• Proficiency with Git and CI/CD pipelines, particularly GitHub Actions.

• Comfortable using AI-powered development tools, such as Claude Code, custom skills, and agents, to support technical refinement, documentation, feature development, and coding.

• Strong problem-solving, technical communication, collaboration, and documentation skills, with the ability to contribute to technical discovery and make informed engineering decisions.

• Knowledge of Segregation of Duties (SoD) and/or OpenFGA for fine-grained authorization is considered an advantage.

• Experience with Kubernetes, GitOps concepts, Anticorruption Layer patterns, and Factory/Strategy patterns for interchangeable identity providers is a plus.

• If you reside in the Campinas Metropolitan Region, availability to work from the local offices is required in accordance with the applicable attendance policy.

Benefits:

• Health and dental insurance.

• Meal and food allowances.

• Childcare assistance.

• Extended parental leave.

• Access to fitness, wellness, and healthcare professionals through Wellhub and TotalPass partnerships.

• Profit Sharing and Results (PLR).

• Life insurance.

• Continuous learning opportunities through an internal learning platform.

• Access to online courses and language-learning platforms.

• Discounts through partner programs.

• Online resources dedicated to physical health, mental health, and overall well-being.

• Pregnancy and responsible-parenthood support and courses.

• Opportunities to work with modern technologies, AI-assisted development, cloud platforms, identity management, and large-scale platform modernization.

• Remote work environment, subject to the applicable office attendance requirements for employees in the Campinas Metropolitan Region.