Job Description

Job Summary

This role is responsible for designing, developing, securing, and operating enterprise-grade web applications across both frontend and backend technologies. The candidate will lead complex feature development, make architectural decisions, mentor engineers, and ensure applications are scalable, secure, performant, and production-ready.

Key Responsibilities

• Work autonomously across the stack and resolve ambiguous, complex technical problems and risks.
• Lead the design and delivery of complex features and services using React, Python, GraphQL, and relational databases, balancing user needs, maintainability, performance, and delivery constraints.
• Define and evolve GraphQL schemas and resolver patterns; guide API compatibility, authorization, caching, pagination, and query performance decisions.
• Evaluate architecture and technical trade-offs across services, data, and frontend components; explain decisions to technical and nontechnical stakeholders.
• Set expectations for code quality, testing, review, and secure development; review complex changes and guide team members through implementation.
• Mentor and guide other team members through technical decisions, design reviews, code reviews, and knowledge sharing.
• Guide threat-aware design and production readiness, including access-control boundaries, sensitive-data handling, failure behavior, capacity, performance, and recovery considerations.
• Promote observability through useful logs, metrics, and traces; guide investigation of production issues and improvements to service reliability.
• Help identify and address technical debt, cross-team dependencies, and delivery risks.
• Guide appropriate use of AI-assisted development tools and review generated code and tests for correctness, security, maintainability, and coverage; mentor team members on effective use.

Skill Requirements

Mandatory requirements:

• University degree, preferably in computer science, computer engineering, engineering, or information systems.
• Advanced English proficiency, spoken and written, is required for technical discussions, documentation, and collaboration.
• Availability to work during business hours aligned with Americas time zones, ensuring overlap with clients and team members for meetings and collaboration.
• Extensive experience building, testing, and operating production web applications across frontend and backend services.
• Strong experience with JavaScript or TypeScript, React, Python frameworks such as FastAPI or Django, relational database performance, and GraphQL API design and optimization.
• Experience designing GraphQL schemas and resolvers and addressing authorization, compatibility, caching, pagination, and query performance.
• Strong understanding of automated testing, CI/CD, containerized deployments, service-based or microservice architectures, and production operations.
• Proven experience designing and reviewing secure applications, including threat modeling, secure design reviews, and implementation of authentication and authorization (e.g., OAuth 2.0/OpenID Connect, role- or attribute-based access control, multi-tenant data isolation).
• Solid knowledge of common web and API vulnerabilities and their mitigations, including the OWASP Top 10 and OWASP API Security Top 10, and GraphQL-specific risks such as query depth and complexity abuse, batching attacks, field-level authorization gaps, and introspection exposure.
• Experience integrating security into CI/CD and operations, including secrets management, encryption in transit and at rest, dependency and container image vulnerability scanning (SAST, DAST, SCA), security logging and audit trails, and timely remediation of findings or incidents.
• Familiarity with data protection and privacy requirements applicable to the systems being built (e.g., LGPD, GDPR, or client-specific compliance standards).
• Experience evaluating AI-assisted development output and guiding team members in its effective and secure use.

Other Requirements

• Experience with cloud platforms, distributed systems, infrastructure automation, and production observability tools.
• Experience establishing engineering standards, improving development processes, and coordinating delivery across multidisciplinary teams.
• Experience applying and promoting TDD and BDD practices; familiarity with domain-driven design (DDD) concepts such as bounded contexts and domain modeling.