Grupo QuintoAndar | Senior Software Engineer - Endpoint Security

The role

You will build and maintain security infrastructure for device posture management and Zero Trust access control. This includes automating security platforms using IaC and designing scalable Zero Trust architecture.

What you will do

• Build and automate security platforms using Infrastructure as Code
• Design and scale Zero Trust Network Access policies
• Design automated workflows for device health, patch management, and browser hardening
• Collaborate with DevOps and IT Ops to integrate security checks into developer workflows
• Take full lifecycle ownership of internal security tools and custom endpoint applications
• Guide technical excellence through design and code reviews
• Mentor junior and mid-level software engineers
• Maintain system reliability through observability and SIEM integration
• Troubleshoot complex issues across hardware, network, and SaaS boundaries

Required qualifications

• Experience with device management frameworks (Apple MDM, Windows CSPs) and modern MDM tools (Microsoft Intune, Kandji)
• Understanding of ZTNA frameworks, device posture assessments, and health attestation techniques
• Experience managing infrastructure, configurations, or security setups as code using Terraform, OpenTofu, or Terragrunt
• Experience designing and evolving scalable software architecture and consuming RESTful APIs
• Understanding of cloud infrastructure (AWS or GCP) and directory services/IdPs (Google Workspace, Entra ID, or Okta)
• Experience in Agile development environments (Scrum or Kanban)
• Solid computer science fundamentals, including data structures, algorithms, and secure design patterns
• Strong analytical skills to troubleshoot complex technical issues
• Fluency in Portuguese
• Advanced or fluent English

Nice to have

• Hands-on experience with Zscaler solutions (ZPA, ZIA, ZDX, ZIdentity) or other enterprise ZTNA vendors
• Understanding of relational database design (SQL)
• Experience with observability, logging, and monitoring systems (Datadog, Prometheus, ELK, or SIEM platforms like Google SecOps)
• Proficiency in one or more modern programming languages (Python, Go, Java, or Kotlin)
• Experience automating Google Workspace domains, policies, and Service Accounts via IaC
• Understanding of device health posture signaling integration with Identity Providers like Okta
• Experience with cloud-based certificate authorities or private PKI
• Experience integrating automated security checks into modern CI/CD pipelines

Benefits

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day

Before you apply

• The selection process includes application, recruiter interview, tech screening, technical interviews, and offer
• Candidates should release the domain @quintoandar.com.br to ensure email delivery

About the company

Grupo QuintoAndar is the largest real estate ecosystem in Latin America. It has a diversified portfolio of brands and solutions across different countries in Latin America.