Software Engineer - Senior Single Sign-On Engineer

Team: IT

Location: Brazil

Commitment: Full-time

Workplace Type: remote

Accountabilities:

The Senior Single Sign-On Engineer will be responsible for managing and evolving enterprise authentication solutions, ensuring secure and seamless access experiences across complex environments. The role involves technical ownership, incident resolution, integration support, and collaboration with global teams.

• Administer, implement, and continuously improve Single Sign-On (SSO) solutions.
• Analyze and resolve complex authentication and identity federation issues.
• Configure and maintain integrations between Identity Providers (IdPs) and Service Providers (SPs).
• Analyze authentication tokens, assertions, and security flows using specialized tools.
• Diagnose SSO incidents across hybrid environments by correlating logs, certificates, HTTP headers, and access policies.
• Implement security best practices across Windows and Linux environments.
• Support modernization initiatives related to authentication infrastructure and identity management.
• Collaborate with global teams to ensure availability, security, and high performance of authentication environments.
• Monitor systems, analyze events, and contribute to continuous improvements in identity and access processes.

Requirements:

The ideal candidate has strong experience in Identity & Access Management (IAM), enterprise authentication platforms, and security-focused software engineering. This professional should combine technical expertise with analytical thinking and strong communication skills.

• Bachelor’s degree completed in Administration, Finance, Information Technology, Computer Science, or related fields.
• Solid experience working with large-scale enterprise environments and Identity & Access Management (IAM) solutions.
• Advanced English proficiency (B2/C1 level) for collaboration in international environments.
• Experience with Single Sign-On (SSO) technologies and authentication protocols.
• Strong knowledge of SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Experience with Ping Identity or CA SiteMinder.
• Knowledge of token analysis, assertions, authentication flows, and federation concepts.
• Experience using tools such as Fiddler and SAML Tracer.
• Ability to troubleshoot authentication issues in hybrid environments.
• Knowledge of Federation Trust, Session Management, and MFA impacts.
• Experience applying security best practices in Windows and Linux environments.
• Knowledge of Microsoft Active Directory, Windows Server, and Windows Workstation environments.
• Strong analytical mindset, investigative skills, and problem-solving capabilities.
• Excellent communication skills, organization, autonomy, and accountability.
• Previous experience with global enterprise environments and large-scale IAM projects is a plus.
• MBA, postgraduate studies, or consulting experience are considered differentiators.

Benefits:

• Fully remote work model.
• PJ contract arrangement.
• Educational support to encourage professional development.
• Exclusive discounts on courses and educational institutions, including FIAP, FGV, EBAC, Impacta, Full Cycle, Conecte, Open English, Cellep, and others.
• Access to Wellhub wellness solutions.
• Travel discounts and experiences through Onhappy.
• Opportunity to work on strategic identity and security projects in global environments.