Grupo QuintoAndar | Senior Software Engineer - Endpoint Security

What you need

Strong Endpoint Security & Zero Trust Fundamentals: Proven experience with device management frameworks (Apple MDM, Windows CSPs) and modern MDM tools (Microsoft Intune, Kandji). Strong understanding of ZTNA frameworks, device posture assessments, and health attestation techniques.
Infrastructure as Code (IaC) Experience: Demonstrated experience managing infrastructure, configurations, or security setups as code (using Terraform, OpenTofu, or Terragrunt).
Architecture & API Design: Experience designing and evolving scalable software architecture and consuming RESTful APIs. Understanding of cloud infrastructure (AWS or GCP) and directory services/IdPs (Google Workspace, Entra ID, or Okta).
Agile & Computer Science Fundamentals: Proven experience in Agile development environments (Scrum or Kanban) and solid computer science fundamentals, including data structures, algorithms, and secure design patterns.

About the Team

The Endpoint Security team is dedicated to building and maintaining the foundational security infrastructure that protects our entire ecosystem. Our mission is to ensure that company data is accessed exclusively by authorized, healthy, and secure devices, safeguarding corporate availability and operational quality.

As part of our squad, you will work at the convergence of device posture management and Zero Trust access control. We design, configure, and automate the platforms that manage our diverse endpoint fleet—such as MDMs (Microsoft Intune, Kandji/IRU, Google Workspace), EDR, ZTNA (Zero Trust Network Access) and Web/Network filtering (Zscaler ZIA/ZPA, ZIdentity).

Build & Automate Security Platforms (IaC): Drive the architecture and transition of security platforms, MDMs, and collaboration tools (such as Google Workspace) to Infrastructure as Code (IaC) using Terraform/OpenTofu. Automate the deployment of service accounts, groups, Chrome/browser policies, and application access.
Design & Scale Zero Trust Architecture: Implementation and optimization of granular Zero Trust Network Access (ZTNA) policies based on user identity and device posture. Clientless secure access for partner networks and establish resilient, secure corporate network authentication (such as 802.1X via private CA).
Endpoint Hardening & Mobile Safety: Design automated workflows for device health attestation, operating system and application patch management, application allowlists, and browser hardening. Streamline mobile security through automated MDM BYOD enrollment.
Collaborate Cross-Functionally: Work closely with DevOps, IT Ops, and other software engineering organizations to integrate security and posture checks directly into developer workflows and automated pipelines, minimizing friction while maintaining a high security bar.
Full Lifecycle Ownership: Take complete ownership of the software development lifecycle for internal security tools, automated integrations, and custom endpoint applications—from requirements gathering and architecture to testing, deployment, and monitoring.
Quality & Mentorship: Guide your team's technical excellence by advocating for clean, well-tested code and solid design patterns. Conduct design and code reviews, and mentor junior and mid-level software engineers.
Operational Excellence: Maintain system reliability and trust through robust observability and SIEM integration (e.g., Google SecOps). Troubleshoot complex issues across hardware, network, and SaaS boundaries, participate in incident resolution with a learning mindset, and build automated remediation paths.

Security Level

We want to have as many talented people as possible in our team. So, although this position is described as “Senior Software Engineer”, you can apply even if you don’t consider yourself as a senior professional yet. It’s important to us to create a qualified talent poll and we will definitely reach out to you if we think you can add to our teams, no matter what seniority level you are today.

Grupo QuintoAndar | Senior Software Engineer - Endpoint Security

What you need

Grupo QuintoAndar | Senior Software Engineer - Endpoint Security

What you need

You'll stand out if you

Location & Remote Work

About the Team

Pay and benefits

About Grupo QuintoAndar

About Grupo QuintoAndar

About Working at QuintoAndar

Similar jobs at other companies

Software Engineer Sênior Brazil

[Job-32250]Senior IOS Developer, Brasil

[Job- 30015] Senior Java Developer, São Paulo (Hybrid)

Software Engineer - Brasil

[Job-32544] Mid-Level Full Stack Developer (Java/Angular), Brazil

Senior Android Software Engineer - Brazil

Grupo QuintoAndar