Senior Software Engineer (Endpoint Security)

Location: Remote-first from anywhere in Brazil; optional work from São Paulo offices or partner coworking spaces up to twice a week.

Company

Grupo hirify.global is a Latin American real estate technology ecosystem transforming the housing journey through technology and innovation, with a technology hub in Portugal.

What you will do

• Build and automate endpoint security platforms, MDMs, and collaboration tools using Terraform/OpenTofu.
• Design and scale Zero Trust Network Access policies based on user identity and device posture, including secure partner access and corporate network authentication.
• Develop automated device health attestation, patch management, application allowlists, browser hardening, and BYOD enrollment workflows.
• Integrate security and posture checks into DevOps, IT operations, engineering workflows, and CI/CD pipelines.
• Own the lifecycle of internal security tools, integrations, and endpoint applications, from requirements and architecture through deployment and monitoring.
• Improve reliability through observability and SIEM integration, troubleshoot cross-platform incidents, build remediation paths, conduct reviews, and mentor engineers.

Requirements

• Proven experience with endpoint security, Apple MDM, Windows CSPs, Microsoft Intune, and Kandji.
• Strong understanding of ZTNA frameworks, device posture assessment, and health attestation.
• Experience managing infrastructure, configurations, or security setups as code with Terraform, OpenTofu, or Terragrunt.
• Experience designing scalable software architecture, consuming RESTful APIs, and working with AWS or GCP.
• Understanding of directory services and identity providers such as Google Workspace, Entra ID, or Okta.
• Experience in Agile development environments using Scrum or Kanban.
• Solid computer science fundamentals, including data structures, algorithms, and secure design patterns.
• Strong analytical and troubleshooting skills across devices, networks, and integrations.
• Fluency in Portuguese and advanced or fluent English.

Nice to have

• Hands-on experience with Zscaler solutions, including ZPA, ZIA, ZDX, or ZIdentity, or other enterprise ZTNA vendors.
• Knowledge of relational database design, SQL, observability, logging, monitoring, and SIEM platforms such as Datadog, Prometheus, ELK, or Google SecOps.
• Proficiency in Python, Go, Java, or Kotlin for automation code and API integrations.
• Experience automating Google Workspace domains, policies, and service accounts through IaC.
• Experience integrating device health posture signals with identity providers such as Okta.
• Experience with cloud-based certificate authorities or private PKI.
• Experience integrating automated security checks into CI/CD pipelines.

Culture & Benefits

• Remote-first work model with the option to use São Paulo offices or partner coworking spaces up to twice weekly.
• Informal, horizontal, collaborative environment focused on innovation, high performance, and best practices.
• Competitive salary, profit sharing, meal allowance, home office allowance, and health, dental, and life insurance.
• Childcare and atypical parenthood subsidies, Wellhub, employee assistance, and extended parental leave.
• Additional days off, benefits club, education discounts, and children's reading kits.

Hiring process

• The process averages 40 days and includes application, recruiter interview, technical screening with a coding interview, technical architecture interviews with live cases, and an offer.
• Communication is conducted by email; applicants should allow emails from @hirify.global.com.br.