Software Development Specialist – Platform Engineer – API, Identity

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

VOLL

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2017

🤝 B2B

🚗 Transport

💰 Seed Round on 2020-06

B2B • Transport • Travel

VOLL is one of the largest corporate travel agencies in Latin America, offering an all-in-one app dedicated to travel management, corporate mobility, and expense management. With proprietary technology, VOLL provides a seamless experience for business travelers and travel managers, focusing on efficiency and cost reduction. The platform enables companies to manage every aspect of corporate travel, including integrated payment solutions and comprehensive reporting tools, ensuring compliance with travel policies and maximizing savings.

📋 Description

• Lead the evolution of the API Gateway as a secure exposure layer, complementing the existing WAF with rate limiting, schema validation, and self-service onboarding of new APIs. • Define and evolve the authentication and authorization architecture (OAuth2, OIDC, JWT) for APIs exposed to external clients. • Design security guardrails for the public exposure of MCP servers: client authentication, tools scope, per-client/tenant limits, and abuse prevention. • Define authorization patterns between internal services (mTLS, service-to-service access policies). • Build reusable libraries and components that product teams integrate to expose APIs secure-by-default. • Serve as the technical contact with Cybersecurity/AppSec to align the externally exposed surface. • Identify and prioritize security gaps in external exposure before they become incidents. • Review product teams' architectures that expose new services externally, focusing on authentication and authorization. • *Objectives may extend beyond this initial scope, involving other challenges focused on architecture, back-end, messaging, and security as the platform and team needs evolve.*

🎯 Requirements

• Proven experience as a platform engineer or senior software developer building tools/infrastructure consumed by other teams. • API Gateway architecture and management (Kong, Apigee, AWS API Gateway, or similar). • Authentication and authorization applied to external APIs: OAuth2, OIDC, JWT, key rotation. • Service authorization in distributed environments (service-to-service), including mTLS. • Secure software development (OWASP), with a focus on applications exposed externally. • Microservices architecture design and event-driven architecture. • Bachelor's degree in Computer Science, Software Engineering, Information Systems, or related fields. • **Nice to have:** • Experience exposing MCP servers or similar integration protocols with AI agents. • Previous experience working with Cybersecurity/AppSec. • Experience with VPC Lattice, ECS Service Connect, or service mesh. • Advanced English and/or Spanish.

🏖️ Benefits

• Meal/food allowance on a Flash card; • SulAmérica medical and dental plans; • Total Pass; • Home office allowance on a Flash card; • Mental health assistance (VOLL Care); • Education assistance (VOLL Education); • Group life insurance; • 6-month maternity leave; • 30-day paternity leave (Our parental leave policy equally applies to same-sex couples). • Vacation after 6 months; • Day off.