Grupo QuintoAndar | Senior Software Engineer - Endpoint Security

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.

• Possibility of learning;
• Opportunity to work in a team that seeks to use the best practices and tools in the market;
• Work in an informal environment with a horizontal structure;
• Being part of a team working on a high-impact project that affects the lives of thousands of people.

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

This job description is written in English because for that position you will need it for communications with coworkers and suppliers who are from worldwide, for tools and internal materials as well.

1. Our selection process currently lasts an average of 40 days, from application to completion of the assessment. Going through:

   • Application
   • Interview with Recruiters
   • Tech Screening with Engineering Team (Coding Interview)
   • Technicals Interviews (Architecture live cases)
   • Offer

The Endpoint Security team is dedicated to building and maintaining the foundational security infrastructure that protects our entire ecosystem. Our mission is to ensure that company data is accessed exclusively by authorized, healthy, and secure devices, safeguarding corporate availability and operational quality.

As part of our squad, you will work at the convergence of device posture management and Zero Trust access control. We design, configure, and automate the platforms that manage our diverse endpoint fleet—such as MDMs (Microsoft Intune, Kandji/IRU, Google Workspace), EDR, ZTNA (Zero Trust Network Access) and Web/Network filtering (Zscaler ZIA/ZPA, ZIdentity).

• Build & Automate Security Platforms (IaC): Drive the architecture and transition of security platforms, MDMs, and collaboration tools (such as Google Workspace) to Infrastructure as Code (IaC) using Terraform/OpenTofu. Automate the deployment of service accounts, groups, Chrome/browser policies, and application access.
• Design & Scale Zero Trust Architecture: Implementation and optimization of granular Zero Trust Network Access (ZTNA) policies based on user identity and device posture. Clientless secure access for partner networks and establish resilient, secure corporate network authentication (such as 802.1X via private CA).
• Endpoint Hardening & Mobile Safety: Design automated workflows for device health attestation, operating system and application patch management, application allowlists, and browser hardening. Streamline mobile security through automated MDM BYOD enrollment.
• Collaborate Cross-Functionally: Work closely with DevOps, IT Ops, and other software engineering organizations to integrate security and posture checks directly into developer workflows and automated pipelines, minimizing friction while maintaining a high security bar.
• Full Lifecycle Ownership: Take complete ownership of the software development lifecycle for internal security tools, automated integrations, and custom endpoint applications—from requirements gathering and architecture to testing, deployment, and monitoring.
• Quality & Mentorship: Guide your team's technical excellence by advocating for clean, well-tested code and solid design patterns. Conduct design and code reviews, and mentor junior and mid-level software engineers.
• Operational Excellence: Maintain system reliability and trust through robust observability and SIEM integration (e.g., Google SecOps). Troubleshoot complex issues across hardware, network, and SaaS boundaries, participate in incident resolution with a learning mindset, and build automated remediation paths.

We want to have as many talented people as possible in our team. So, although this position is described as “Senior Software Engineer”, you can apply even if you don’t consider yourself as a senior professional yet. It’s important to us to create a qualified talent poll and we will definitely reach out to you if we think you can add to our teams, no matter what seniority level you are today.

What we are looking for:

• Strong Endpoint Security & Zero Trust Fundamentals: Proven experience with device management frameworks (Apple MDM, Windows CSPs) and modern MDM tools (Microsoft Intune, Kandji). Strong understanding of ZTNA frameworks, device posture assessments, and health attestation techniques.
• Infrastructure as Code (IaC) Experience: Demonstrated experience managing infrastructure, configurations, or security setups as code (using Terraform, OpenTofu, or Terragrunt).
• Architecture & API Design: Experience designing and evolving scalable software architecture and consuming RESTful APIs. Understanding of cloud infrastructure (AWS or GCP) and directory services/IdPs (Google Workspace, Entra ID, or Okta).
• Agile & Computer Science Fundamentals: Proven experience in Agile development environments (Scrum or Kanban) and solid computer science fundamentals, including data structures, algorithms, and secure design patterns.
• Problem Solving: Strong analytical skills with the ability to troubleshoot complex, multi-layered technical issues across different devices, networks, and integrations.
• Languages: Fluency in Portuguese and advanced/fluent English.

• Have hands-on experience with Zscaler solutions (ZPA, ZIA, ZDX, ZIdentity) or other enterprise ZTNA vendors.
• Have understanding of relational database design (SQL) and experience with observability, logging, and monitoring systems (such as Datadog, Prometheus, ELK, or SIEM platforms like Google SecOps).
• Have proficiency in one or more modern programming languages (such as Python, Go, Java, or Kotlin) to write clean, maintainable, and well-tested automation code and API integrations.
• Have experience automating Google Workspace domains, policies, and Service Accounts via IaC.
• Understand the deep integration of device health posture signaling with Identity Providers like Okta.
• Have experience with cloud-based certificate authorities or private PKI.
• Know how to integrate automated security checks into modern CI/CD pipelines.

Our hiring process starts with the application! If you truly want to be part of our team, please complete this step of the process. We analyze all candidates individually and provide feedback to all applicants. All communication will be conducted via email, so please stay tuned for our messages and release the domain @quintoandar.com.br to ensure our emails are not sent to spam.

• Competitive salary
• Profit sharing
• Meal allowance 
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids
  
  

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.

#LI-CO2