Staff Security Engineer (IAM)

The role

This senior individual-contributor role supports a multi-year IAM security strategy across a financial technology organization. The person will direct execution across multiple engineering teams and ensure identity and access controls meet security, regulatory, and operational requirements.

What you will do

• Define, communicate, and execute a multi-year security strategy in the IAM field.
• Lead organization-wide authentication migrations across multiple surfaces and device ecosystems.
• Design and maintain core identity infrastructure including enterprise Identity Provider, PKI, and mTLS.
• Translate least-privilege access into a measurable organization-wide program.
• Design and maintain a security engineering framework.
• Lead technical incident response for identity and access security events.
• Design and facilitate large-scale preparedness exercises.
• Provide technical mentorship and coaching to senior engineers.
• Serve as the technical authority in engagements with Legal, Compliance, internal audit, and external regulators.

Required qualifications

• Solid professional experience in security engineering, with a concentration in identity, authentication, or access management.
• Demonstrated track record of leading complex, multi-year security programs.
• Expert-level knowledge of IAM and authentication protocols: OIDC, OAuth 2.0, SAML 2.0, FIDO2/WebAuthn, mTLS, and Public Key Infrastructure (PKI).
• Proficiency in software engineering: ability to produce, review, and reason about production-quality code in at least one general-purpose programming language.
• Demonstrated ability to model identity-related threat scenarios and design controls.
• Commitment to security as an organizational capability that enables business outcomes.
• Experience communicating technical risk assessments and strategic recommendations to senior non-technical stakeholders.

Nice to have

• Experience operating within a financial services institution or similarly regulated environment.
• Hands-on experience administering or integrating with an enterprise Identity Provider at scale, particularly Okta, or Keycloak.
• Experience designing and enforcing security controls for third-party, BPO, or partner environments.
• Experience leading organizational adoption of Zero Trust architecture.
• Contributions to the broader security community.

Benefits

• Chance of earning equity at Nubank
• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
• Public Transportation Commuting Benefit (Vale-Transporte)
• NuCare – Psychological, Financial and Legal Assistance Program
• Life Insurance
• Medical Plan
• Dental Plan
• NuLanguage – Language Course Program
• Nucleo - Our learning platform of courses
• Extended Parental Leave
• Daycare Allowance
• Parental Consultancy

Before you apply

• Recruitment process may involve the use of artificial intelligence–enabled tools.
• Nu does not provide individualized technical feedback.

About the company

Nu serves more than 140 million customers with a mission to fight complexity and empower people. The company leads an industry transformation through innovative products and human-centered services.