Software Engineer - Senior Single Sign-On Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Software Engineer - Senior Single Sign-On Engineer based in Brazil.

We are seeking a Senior Software Engineer specialized in Single Sign-On (SSO) to support strategic identity and access management initiatives in global enterprise environments. This role focuses on designing, implementing, troubleshooting, and improving authentication solutions while ensuring security, reliability, and performance. You will work with modern identity protocols, federation technologies, and hybrid architectures alongside international teams. The position requires deep technical expertise, strong problem-solving abilities, and a security-focused mindset. The ideal candidate enjoys investigating complex authentication challenges and building scalable solutions for enterprise environments. This is a fully remote opportunity under a PJ contract model, offering the chance to contribute to high-impact technology projects.

Accountabilities:: The Senior Single Sign-On Engineer will be responsible for managing and evolving enterprise authentication solutions, ensuring secure and seamless access experiences across complex environments. The role involves technical ownership, incident resolution, integration support, and collaboration with global teams.

Administer, implement, and continuously improve Single Sign-On (SSO) solutions.

Analyze and resolve complex authentication and identity federation issues.

Configure and maintain integrations between Identity Providers (IdPs) and Service Providers (SPs).

Analyze authentication tokens, assertions, and security flows using specialized tools.

Diagnose SSO incidents across hybrid environments by correlating logs, certificates, HTTP headers, and access policies.

Implement security best practices across Windows and Linux environments.

Support modernization initiatives related to authentication infrastructure and identity management.

Collaborate with global teams to ensure availability, security, and high performance of authentication environments.

Monitor systems, analyze events, and contribute to continuous improvements in identity and access processes.

Requirements:

The ideal candidate has strong experience in Identity & Access Management (IAM), enterprise authentication platforms, and security-focused software engineering. This professional should combine technical expertise with analytical thinking and strong communication skills.

Bachelor’s degree completed in Administration, Finance, Information Technology, Computer Science, or related fields.

Solid experience working with large-scale enterprise environments and Identity & Access Management (IAM) solutions.

Advanced English proficiency (B2/C1 level) for collaboration in international environments.

Experience with Single Sign-On (SSO) technologies and authentication protocols.

Strong knowledge of SAML, OAuth 2.0, and OpenID Connect (OIDC).

Experience with Ping Identity or CA SiteMinder.

Knowledge of token analysis, assertions, authentication flows, and federation concepts.

Experience using tools such as Fiddler and SAML Tracer.

Ability to troubleshoot authentication issues in hybrid environments.

Knowledge of Federation Trust, Session Management, and MFA impacts.

Experience applying security best practices in Windows and Linux environments.

Knowledge of Microsoft Active Directory, Windows Server, and Windows Workstation environments.

Strong analytical mindset, investigative skills, and problem-solving capabilities.

Excellent communication skills, organization, autonomy, and accountability.

Previous experience with global enterprise environments and large-scale IAM projects is a plus.

MBA, postgraduate studies, or consulting experience are considered differentiators.

Benefits:

Fully remote work model.

PJ contract arrangement.

Educational support to encourage professional development.

Exclusive discounts on courses and educational institutions, including FIAP, FGV, EBAC, Impacta, Full Cycle, Conecte, Open English, Cellep, and others.

Access to Wellhub wellness solutions.

Travel discounts and experiences through Onhappy.

Opportunity to work on strategic identity and security projects in global environments.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1