VOLL is a complete global solution for travel and expense management.
Software Development Specialist – Platform Engineer – API, Identity
Location
Brazil
Posted
9 days ago
Salary
0
Seniority
Senior
Job Description
Software Development Specialist – Platform Engineer – API, Identity
VOLL
• Lead the evolution of the API Gateway as a secure exposure layer, complementing the existing WAF with rate limiting, schema validation, and self-service onboarding of new APIs. • Define and evolve the authentication and authorization architecture (OAuth2, OIDC, JWT) for APIs exposed to external clients. • Design security guardrails for the public exposure of MCP servers: client authentication, tools scope, per-client/tenant limits, and abuse prevention. • Define authorization patterns between internal services (mTLS, service-to-service access policies). • Build reusable libraries and components that product teams integrate to expose APIs secure-by-default. • Serve as the technical contact with Cybersecurity/AppSec to align the externally exposed surface. • Identify and prioritize security gaps in external exposure before they become incidents. • Review product teams' architectures that expose new services externally, focusing on authentication and authorization. • *Objectives may extend beyond this initial scope, involving other challenges focused on architecture, back-end, messaging, and security as the platform and team needs evolve.*
Job Requirements
- Proven experience as a platform engineer or senior software developer building tools/infrastructure consumed by other teams.
- API Gateway architecture and management (Kong, Apigee, AWS API Gateway, or similar).
- Authentication and authorization applied to external APIs: OAuth2, OIDC, JWT, key rotation.
- Service authorization in distributed environments (service-to-service), including mTLS.
- Secure software development (OWASP), with a focus on applications exposed externally.
- Microservices architecture design and event-driven architecture.
- Bachelor's degree in Computer Science, Software Engineering, Information Systems, or related fields.
- Nice to have:**
- Experience exposing MCP servers or similar integration protocols with AI agents.
- Previous experience working with Cybersecurity/AppSec.
- Experience with VPC Lattice, ECS Service Connect, or service mesh.
- Advanced English and/or Spanish.
Benefits
- Meal/food allowance on a Flash card;
- SulAmérica medical and dental plans;
- Total Pass;
- Home office allowance on a Flash card;
- Mental health assistance (VOLL Care);
- Education assistance (VOLL Education);
- Group life insurance;
- 6-month maternity leave;
- 30-day paternity leave (Our parental leave policy equally applies to same-sex couples).
- Vacation after 6 months;
- Day off.
Related Guides
Related Job Pages
More Backend Engineer Jobs
Senior Technical Architect – PubSec
Salesforce👋 We're Salesforce, the customer company. CRM + Data + AI + Trust.
• Serve as a trusted advisor to the client • Identify and lead internal critical initiatives to grow the consulting practice; serving as an active contributor to the community’s overall knowledge base and expertise • Guide customers and colleagues in rationalizing and deploying emerging technologies that drive increased business value • Work collaboratively, having very strong communications skills, especially in teaching complex concepts and creative, prescriptive thinking • Identify and proactively manage risk areas and commit to seeing an issue through to complete resolution • Manage customer expectations; negotiate solutions to complex problems with both the customer and third-party partners • Review and correct project/program direction, approach, and key artifacts to keep programs on track, while ensuring solutions are extendable and maintainable going forward • Work closely with Delivery Managers, Solution Architects, and directly with clients to architect technology solutions to meet client needs • Contribute to a program vision while advising and articulating program/project strategies on enabling technologies including the Salesforce Platform
• Desenvolver, implementar e manter APIs e serviços backend utilizando a plataforma .NET (Core/.NET). • Colaborar na arquitetura de novas funcionalidades e na melhoria contínua dos sistemas existentes. • Garantir a qualidade do código através de testes unitários, de integração e boas práticas de desenvolvimento (SOLID, Clean Architecture). • Implementar e gerenciar soluções de Observabilidade (métricas, logs, traces) utilizando ferramentas como Dynatrace para monitorar a saúde e performance das aplicações em produção. • Trabalhar com infraestrutura em nuvem, implantando e gerenciando serviços no Google Cloud Platform (GCP), com foco em Google Kubernetes Engine (GKE). • Participar ativamente das cerimônias ágeis (Scrum/Kanban) e da revisão de código (Code Review). • Identificar gargalos de performance e propor soluções de otimização.
• Develop and enhance back-end applications using Node.js and Java. • Build and maintain APIs and integrations between systems. • Participate in the technical analysis of requirements, proposing efficient and scalable solutions. • Perform code refactoring to improve performance, readability, and maintainability. • Work with relational databases (SQL), ensuring data integrity and query performance. • Operate in containerized environments using Kubernetes. • Develop solutions in Cloud environments (AWS or Azure). • Collaborate with multidisciplinary teams, contributing to technical decisions and knowledge sharing. • Ensure the quality of deliverables through development best practices and code reviews.
• Designing, developing, and maintaining sophisticated server-side applications using Scala and related technologies • Creating robust and scalable APIs • Ensuring efficient data processing and implementing business logic • Writing comprehensive unit tests • Working with distributed systems to ensure the reliability and scalability of software architecture • Participating in design reviews and supporting system integration and testing efforts



