Tech Lead FullStack

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Tech Lead FullStack based in Brazil.

This role offers the opportunity to lead the development and evolution of critical authentication, authorization, and observability capabilities within a modern multi-tenant platform. You will work across frontend and backend technologies while helping shape secure and scalable identity solutions. The position combines hands-on engineering with technical discovery, architecture, and integration work. You will contribute to OAuth2/OIDC-based authentication, enterprise federation, role management, and identity provider integrations. The role also involves supporting legacy services during a gradual modernization journey, ensuring continuity for existing customers. You will collaborate closely with infrastructure and product teams in a remote-first environment where AI-assisted development and engineering excellence are encouraged.

Accountabilities

• Develop and evolve the Authentication & Authorization module using OAuth2, including centralized login, product-level role definitions, and enterprise OIDC federation within a multi-tenant architecture.

• Maintain and support existing authentication flows and services, ensuring compatibility for customers who have not yet migrated to the new architecture.

• Maintain user and role management services while ensuring stability during the transition to the new platform model.

• Integrate users and roles from the selected identity provider, such as Keycloak or Auth0, into new services and support identity-data synchronization and migration between legacy and modern models.

• Implement observability across the modules, including metrics, logging, dashboards, and monitoring capabilities.

• Evaluate and prototype integrations with identity providers such as Auth0, Keycloak, Okta, Entra ID, and Azure B2C to support the selection of a centralized identity platform.

• Integrate delivered modules with the central portal and identity platform in collaboration with infrastructure teams.

• Participate in technical discovery, refinement, and planning for upcoming platform capabilities and improvements.

• Document architectural and technical decisions while ensuring services remain aligned with a shared-ownership model across cloud infrastructure and individual products.

Requirements:

• Demonstrated experience in full-stack development, with strong frontend skills in React, TypeScript, and Next.js and backend experience with Node.js, Java, or Kotlin.

• Practical knowledge of authentication and authorization concepts, including OAuth2, OIDC, and RBAC.

• Hands-on experience with identity providers such as Auth0, Keycloak, Okta, Entra ID, or Azure B2C.

• Experience working with messaging and event-driven systems, particularly Kafka or an equivalent technology.

• Comfortable working within codebases where legacy and modern versions coexist, supporting gradual migrations without disrupting existing customers.

• Familiarity with observability technologies such as SigNoz, Prometheus, and Grafana.

• Experience with at least one public cloud provider, such as AWS or Azure, as well as practical Docker experience.

• Proficiency with Git and CI/CD pipelines, particularly GitHub Actions.

• Comfortable using AI-powered development tools, such as Claude Code, custom skills, and agents, to support technical refinement, documentation, feature development, and coding.

• Strong problem-solving, technical communication, collaboration, and documentation skills, with the ability to contribute to technical discovery and make informed engineering decisions.

• Knowledge of Segregation of Duties (SoD) and/or OpenFGA for fine-grained authorization is considered an advantage.

• Experience with Kubernetes, GitOps concepts, Anticorruption Layer patterns, and Factory/Strategy patterns for interchangeable identity providers is a plus.

• If you reside in the Campinas Metropolitan Region, availability to work from the local offices is required in accordance with the applicable attendance policy.

Benefits:

* Health and dental insurance.

* Meal and food allowances.

* Childcare assistance.

* Extended parental leave.

* Access to fitness, wellness, and healthcare professionals through Wellhub and TotalPass partnerships.

* Profit Sharing and Results (PLR).

* Life insurance.

* Continuous learning opportunities through an internal learning platform.

* Access to online courses and language-learning platforms.

* Discounts through partner programs.

* Online resources dedicated to physical health, mental health, and overall well-being.

* Pregnancy and responsible-parenthood support and courses.

* Opportunities to work with modern technologies, AI-assisted development, cloud platforms, identity management, and large-scale platform modernization.

* Remote work environment, subject to the applicable office attendance requirements for employees in the Campinas Metropolitan Region.