Software Development Specialist – Platform Engineer – API, Identity

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Drive the advancement of the API Gateway as a secure exposure layer, enhancing the current WAF with features such as rate limiting, schema validation, and self-service onboarding for new APIs.

• Establish and refine the architecture for authentication and authorization (OAuth2, OIDC, JWT) for APIs accessible to external clients.

• Create security guidelines for the public exposure of MCP servers, including client authentication, tool scope, limits per client/tenant, and measures to prevent abuse.

• Define authorization strategies for internal services (mTLS, service-to-service access policies).

• Develop reusable libraries and components that product teams can integrate to ensure APIs are secure by default.

• Act as the primary technical liaison with Cybersecurity/AppSec to ensure alignment of the externally exposed infrastructure.

• Identify and prioritize security vulnerabilities in external exposure to prevent potential incidents.

• Evaluate the architectures of product teams that expose new services externally, with a focus on authentication and authorization.

• *Objectives may extend beyond this initial scope, encompassing additional challenges related to architecture, back-end, messaging, and security as the platform and team requirements evolve.*

⛳️ Requirements

• Demonstrated experience as a platform engineer or senior software developer creating tools/infrastructure utilized by other teams.

• Proficiency in API Gateway architecture and management (Kong, Apigee, AWS API Gateway, or similar).

• Experience with authentication and authorization for external APIs: OAuth2, OIDC, JWT, and key rotation.

• Knowledge of service authorization in distributed environments (service-to-service), including mTLS.

• Familiarity with secure software development practices (OWASP), particularly for applications exposed externally.

• Expertise in microservices architecture design and event-driven architecture.

• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or related fields.

• **Nice to have:**

• Experience in exposing MCP servers or similar integration protocols involving AI agents.

• Prior experience collaborating with Cybersecurity/AppSec.

• Familiarity with VPC Lattice, ECS Service Connect, or service mesh.

• Proficiency in English and/or Spanish.

🏝️ Benefits

• Meal/food allowance on a Flash card;

• SulAmérica medical and dental plans;

• Total Pass;

• Home office allowance on a Flash card;

• Mental health assistance (VOLL Care);

• Education assistance (VOLL Education);

• Group life insurance;

• 6-month maternity leave;

• 30-day paternity leave (Our parental leave policy equally applies to same-sex couples).

• Vacation after 6 months;

• Day off.