{"id":1660078,"url":"https://alion.io/job/brex-software-engineer-ii-identity-and-access-management","title":"Software Engineer II, Identity and Access Management","company":{"id":18232,"name":"Brex","domain":"brex.com","url":"https://alion.io/company/brex","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":55,"ghost_share":0,"stale_share":0.782,"repost_share":0,"time_to_fill_p50_days":67,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["São Paulo, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":113000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Copilot","optional":false},{"name":"IAM","optional":false},{"name":"Okta","optional":false}],"status":"live","first_seen_at":"2026-10-01T17:53:31Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-29T22:46:06Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"Why join us\nBrex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets. By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly. Brex’s AI-native automation and world-class service eliminate manual expense and accounting tasks for customers so they can focus on what matters most. Tens of thousands of the world's best companies run on Brex, including DoorDash, Coinbase, Robinhood, Zoom, Plaid, Reddit, and SeatGeek.\nWorking at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career.\nEngineering at Brex\nEngineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every level - from architecture to deployment. It's an environment where engineering is a craft, and builders become leaders.\nWhat you'll do\nThe Identity and Access Management team builds and maintains secure, user-friendly authentication and authorization systems that protect users, safeguard company assets, and provide a seamless access experience for developers. The team owns critical platform capabilities including login methods, step-up authentication, our custom authorization platform, account delegation flows like Copilot, Pro Access login, embedded partnerships authentication, and core vendor integrations such as Okta and Oso.\nAs a Software Engineer II on IAM, you will build product and platform capabilities that make access to Brex secure, reliable, and easy to use for customers, partners, and internal systems. You will own well-scoped projects with clear impact, contribute to the team’s technical quality and operational excellence, and help evolve the identity platform as Brex invests in signed identity propagation, delegated and agent identity, fine-grained authorization, stronger auditability, and enterprise-ready customer authentication experiences.\nWhere you'll work\nThis role will be based in our São Paulo office. We are a hybrid environment that combines the energy and connections of being in the office with the benefits and flexibility of working from home. We currently require a minimum of 3 days per week in the office - Monday, Wednesday and Thursday. As a perk, we also have up to four weeks per year of fully remote work.\nResponsibilities\nDesign, build, and operate backend systems and APIs for authentication, authorization, identity context, and audit-related workflows.\nDeliver well-scoped projects end to end, from technical design and implementation through rollout, measurement, and operational support.\nImprove login and access experiences across SSO, MFA, step-up authentication, delegated access, and enterprise identity flows.\nBuild and extend authorization systems that support custom roles, resource-aware access control, and secure defaults for product teams.\nHelp create durable, identity-aware audit trails and attribution for user, service, delegated, and agent-driven actions.\nPartner closely with engineers across Brex to make IAM integrations secure by default and easier to adopt through clear patterns, tooling, and shared libraries.\nContribute high-quality code, design reviews, documentation, and operational improvements that raise the bar for reliability and maintainability across the team’s systems.\nRequirements\nYou have strong software engineering fundamentals and experience building reliable production backend systems.\nYou have experience owning well-scoped technical projects and driving them to completion with limited support.\nYou have experience building APIs, services, or platform infrastructure with strong engineering rigor around testing, code quality, and documentation.\nYou communicate clearly, collaborate well across teams, and are effective in cross-functional technical discussions.\nYou care about operational excellence and know how to improve system reliability, reduce toil, and maintain high-quality services over time.\nYou have strong product and engineering judgment and can balance security, usability, and developer experience.\nStrong written and verbal English communication and interpersonal abilities.\nBonus points\nYou have worked on identity and access management, authentication, authorization, or audit systems in a production environment.\nYou have hands-on experience with Okta, Oso, SSO, SAML, OIDC, OAuth, passkeys, or WebAuthn.\nYou have experience building enterprise-facing admin controls, custom roles, delegated access flows, or audit trails.\nYou have worked on platform teams that provide shared infrastructure, paved roads, or secure-by-default frameworks for other engineering teams.\nIf you don’t meet every qualification listed above, we still encourage you to apply. We’re looking for thoughtful engineers who want to build secure, scalable access systems and help shape how identity works across Brex.\nPlease be aware, job-seekers may be at risk of targeting by malicious actors looking for personal data. Brex recruiters will only reach out via LinkedIn or email with a brex.com domain. Any outreach claiming to be from Brex via other sources should be ignored.","description_format":"text","description_chars":5719,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Financial Services","Procurement & Spend Management","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-10-02T03:19:23Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.605,"p_room":0.9,"age_days":27,"expected_fill_days":67,"reasons":["conf:0","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/brex-software-engineer-ii-identity-and-access-management","json_url":"https://alion.io/job/brex-software-engineer-ii-identity-and-access-management.json","meta":{"generated_at":"2026-10-29T23:05:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34117,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18232},"rest":"https://alion.io/mcp/rest/get_company?id=18232"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrex-software-engineer-ii-identity-and-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrex-software-engineer-ii-identity-and-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrex-software-engineer-ii-identity-and-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brex-software-engineer-ii-identity-and-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrex-software-engineer-ii-identity-and-access-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1660078}},{"tool":"search_jobs","arguments":{"company":"brex.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1660078},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}