Staff Security Engineer (IAM)

A staff security engineer in Nubank's identity and access management function, a senior individual contributor shaping IAM security for a digital bank serving more than 100 million customers in Brazil, Mexico and Colombia. The engineer helps set and carry out a multi-year IAM strategy, leads company-wide authentication migrations across browser, OS login, CLI and API surfaces, designs the identity provider, PKI and mTLS foundations, and turns least privilege into a measured programme.

The role also leads identity incident response, runs attack-based preparedness exercises, mentors senior engineers and is the technical authority with regulators. It wants deep IAM experience, expert OIDC, OAuth, SAML, FIDO2 and PKI knowledge, and production coding skill. Hybrid two to three days a week.