Staff Software Engineer (Remote) (Position located in Brazil)

• Session and identity APIs in Rust deployed as AWS Lambda functions — high-throughput, low-latency services handling JWT validation, session lifecycle, and encrypted token management across multiple AWS regions
• Identity provider integrations — orchestration and configuration of Auth0 and Keycloak tenants, IDP sync services, and SSO/OIDC broker logic that spans legacy and modern auth systems
• User provisioning and lifecycle services — the USPS (User Provisioning Service) and UPMS (User Permission Management Service) layers that synchronize user state across products, CRM systems, and identity stores
• Cross-team platform SDKs — auth libraries in Rust, C#, and TypeScript consumed by multiple engineering teams; these are the APIs that teams depend on, so design quality and backward compatibility matter deeply
• Distributed event infrastructure — DFS (Distributed Feedback Service) subscribers, SQS-based event pipelines, and the message routing layer that coordinates state changes across bounded contexts
• Infrastructure-as-Code at scale — multi-account, multi-region Terraform that provisions and governs the identity and platform layer across development, staging, and production environments
• Technical direction — architecture reviews, RFC-style design proposals, mentorship of senior engineers, and cross-team coordination on platform-level changes

• →Develops software using the KnowBe4 Software Development Lifecycle and Agile Methodologies
• →Assists other team members by providing technical direction
• →Defines approaches and solutions to complex technical problems
• →Makes significant contributions in new technology, sometimes resulting in patents, trade secrets, and/or professional publications and presentations
• →Translates KnowBe4's strategic goals into operational plans
• →Provides coordination across functional boundaries
• →May act as team lead for larger sub-projects or entire, small projects

• Strong backend engineering fundamentals in a typed, compiled language — Rust, C#, Go, Java, or equivalent; depth in one, curiosity about others
• AWS serverless architecture — Lambda (multi-runtime), DynamoDB, SQS, SSM, API Gateway, IAM; experience designing systems, not just using them
• Identity and auth concepts — OIDC, OAuth 2.0, JWT, SSO; you understand the flows, the attack surfaces, and the tradeoffs; deep implementation experience is a strong plus
• Distributed systems design — event-driven architecture, eventual consistency, message queues, idempotency, saga patterns
• Terraform at scale — multi-account, multi-region IaC; module design, state management, OIDC-based CI deploy patterns
• API design leadership — designing APIs consumed by multiple teams; versioning strategy, backward compatibility, contract testing
• GitLab CI/CD — pipeline design, shared components, multi-environment deployment patterns
• Technical communication — design docs, RFCs, architecture reviews; ability to synthesize complexity into clear proposals

• Rust — production experience is a strong differentiator; familiarity with the async ecosystem (tokio, axum, reqwest, serde) particularly valued
• C# / .NET (8+) — Lambda AOT compilation, ASP.NET Core, Native AOT targeting linux-arm64
• Auth0 — tenant administration, custom actions, SAML/OIDC/OAuth app configuration, Management API
• Keycloak — realm configuration, custom providers, integration with external IDPs
• TypeScript + Vue 3 — the platform layer includes frontend surfaces; full-stack comfort is valued even at the Staff level
• Python — event-processing services and tooling in this layer use Python
• Security engineering concepts — threat modeling, zero-trust principles, secrets management, credential rotation

• BS or equivalent plus 10 years of experience
• MS or equivalent plus 5 years of experience
• Ph.D. or equivalent plus 4 years of experience 

No recruitment agencies, please.