Principal Software Engineer – Identity & Access Management

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Take charge of the technical vision and roadmap for Sezzle’s authentication and authorization platform, which includes a dedicated API authentication gateway and associated identity services.

• Design, architect, and develop scalable and highly available authentication services and gateway components primarily using Golang, AWS, RDS, and distributed systems patterns.

• Lead the design and execution of phased, zero-downtime migrations for authentication traffic and functionality, incorporating rollback and safety mechanisms.

• Develop and refine authentication and authorization standards, including OAuth2/OIDC, token strategies, service-to-service authentication, and fine-grained authorization models.

• Ensure consistency and scalability within a distributed microservices architecture while upholding performance, reliability, and latency objectives.

• Collaborate with Security and Compliance teams to meet fintech-grade security and regulatory requirements.

• Set forth engineering best practices for observability, security, and continuous integration/continuous deployment (CI/CD).

• Engage in on-call rotations while leading incident response and postmortems for critical authentication pathways.

• Mentor fellow engineers and foster an environment of learning, innovation, and operational excellence.

• Work collaboratively across departments to translate business objectives into technical roadmaps and achieve results.

⛳️ Requirements

• Over 12 years of professional software engineering experience, with substantial backend expertise.

• Recently deployed significant changes to a production application within the last 30 days.

• Extensive hands-on knowledge of authentication and authorization systems, including OAuth2, OpenID Connect, SAML, JWT, session-based authentication, token lifecycle management, RBAC, ABAC, and policy-as-code.

• Experience in designing, building, or managing an API gateway or authentication proxy at scale.

• Demonstrated success in leading large-scale service extraction or migration with little to no impact on customers.

• Strong skills in Golang with experience in building and maintaining RESTful APIs.

• Proficiency with SQL-based relational databases, including MySQL and PostgreSQL, along with performance optimization of schemas and queries.

• Familiarity with distributed systems design patterns, such as transactional outbox, event-driven architecture, and message queues.

• Capacity to propose ideas, influence decisions, and guide complex technical initiatives across various teams.

• Active engagement with AI tools like Claude Code, Codex, Cursor, or custom LLM integrations in current development efforts.

• A Bachelor’s degree in Computer Science or a related technical field is required.

• Preferred qualifications include experience with identity platforms and standards, service mesh and edge technologies, threat modeling, observability tools, AWS infrastructure, fintech/payments/BNPL/consumer lending, CI/CD, Docker, Kubernetes, commercial APIs, and platform infrastructure.

🏝️ Benefits

• Fully remote work with no need for relocation or commuting.

• Principal-level responsibilities and ownership in a growing fintech organization.

• Competitive and negotiable compensation reflective of skills and experience.

• Opportunities for career advancement.

• AI-assisted development tooling integrated as a standard aspect of engineering activities.

• Chance to engage with cutting-edge technology and open-source software.

• A culture that promotes learning, innovation, and operational excellence.