Backend Developer - Specialist

Description

We are seeking a Backend Specialist who will serve as a strategic technical reference, capable of designing, implementing, and evolving world-class distributed architectures within the .NET Core and Google Cloud Platform (GCP) ecosystems. You will be responsible not only for coding solutions but also for elevating the team’s technical excellence through leadership, event-driven architecture, shift-left security, advanced observability, and engineering mentorship. This is a strategically impactful role demanding deep expertise, full autonomy, and business-oriented vision. **Responsibilities and Assignments** **Key Responsibilities:** * Design scalable, resilient, and secure backend architectures applying SOLID, Clean Architecture, DDD, CQRS, and Event-Driven Design * Architect event-oriented solutions using Google Cloud Pub/Sub with resilience, idempotency, and advanced failure handling * Manage corporate API strategy via Google Apigee, implementing governance, edge security, and Zero Trust * Define and implement secure development standards (Secure Coding), mitigating OWASP Top 10 risks and ensuring LGPD compliance * Architect containerized infrastructure with Docker and Kubernetes, defining scaling strategies, auto-recovery, and disaster recovery * Design and optimize complex CI/CD pipelines in GitLab CI, integrating SAST/DAST, SonarQube, dependency analysis, and DevSecOps * Implement and evangelize an observability culture with Dynatrace: APM, distributed tracing, root cause analysis, and runtime vulnerability detection * Conduct Architecture Decision Records (ADRs), maintain technical documentation, and enforce architectural governance to ensure traceability and communication * Exercise technical leadership through rigorous code reviews, mentoring of senior and junior engineers, and dissemination of engineering excellence * Lead troubleshooting and root cause analysis (RCA) for critical production incidents, identifying root causes and implementing definitive fixes * Collaborate with technical leadership, product, security, and infrastructure teams on the platform’s strategic evolution * Identify and propose refactorings, eliminate technical debt, and suggest innovations that balance quality with continuous delivery * Assume end-to-end strategic ownership: from initial design through production monitoring, ensuring quality, security, and performance **Technical Skills & Hard Skills:** ***Software Engineering & .NET Architecture*** * Expert-level mastery of C# and .NET Core / .NET 8+: async/await patterns, memory management, GC tuning, reflection, delegates, and advanced concurrency * Masterful application of SOLID principles in complex, large-scale contexts * Advanced architecture: Clean Architecture, in-depth DDD (Aggregates, Value Objects, Bounded Contexts), CQRS with consistency models * Microservices patterns: service discovery, circuit breakers, saga patterns, compensating transactions * Advanced optimization: distributed caching (Redis), bulk operations, connection pooling, database query optimization for high throughput ***Advanced Security (AppSec & DevSecOps)*** * Deep knowledge of OWASP Top 10: designing defenses against Injections, BOLA, Mass Assignment, Authentication/Authorization bypasses * OAuth 2.0 and OpenID Connect in enterprise environments: flows (Code, Client Credentials, Device), token management, revocation * Advanced access control: RBAC/ABAC design, attribute-based policies, context-aware authorization * Cryptography: AES, RSA, HMAC, key derivation functions; data in transit/at rest; PII masking and LGPD compliance * Secret management with Google Secret Manager, HashiCorp Vault; CI/CD secret scanning and credential logging prevention * Security in CI/CD: SAST, DAST, SCA, dependency vulnerability management, shift-left security culture ***Google Cloud & Event-Driven Architecture*** * Event-driven architecture with Google Cloud Pub/Sub: topics, subscriptions, message ordering, DLQs, at-least-once vs at-most-once semantics * Google.Cloud.PubSub.V1 SDK: optimized Publishers, batched Subscribers, Hosted Services, retry strategies * Advanced patterns: idempotency keys, deduplication, event versioning, schema evolution * Google Apigee: API program design, advanced policies (Target Endpoint Routing, Rate Limiting Quotas), mocking, API versioning * Zero Trust Architecture: mTLS between Apigee backend, certificate management, mutual authentication ***DevOps & Infrastructure as Code*** * Advanced GitLab: complex branching strategies, merge request workflows, GitLab RBAC and governance * CI/CD and DevSecOps: parallel pipelines, artifact management, environment promotion, GitLab-native secret management * Advanced Docker: multi-stage builds, image optimization, CVE scanning, registry security, image signing * Kubernetes expertise: operators, Helm charts, resource limits, network policies, RBAC, pod security policies, etcd management * Deployment strategies: blue-green, canary, rolling updates with zero downtime ***Advanced Observability & SRE*** * Dynatrace full-stack: APM with deep code instrumentation, real-time issue detection, root cause analysis powered by Davis AI * Distributed Tracing: baggage propagation in async flows, trace sampling strategies, cross-system latency analysis * Runtime Application Security Detection (RASP): runtime vulnerability detection, attack surface analysis * Strategic observability: SLO/SLI design, error budgeting, alerting strategies, incident response automation * Root Cause Analysis (RCA): use case modeling, correlation analysis, preventive architectural patterns **Leadership & Soft Skills:** ***Technical Leadership & Strategic Mindset*** * High-impact mentoring: developing future seniors and architects, talent identification, career pathing * Evangelizing technical excellence: establishing standards, disseminating best practices, leading internal technical communities * Architecture governance: defining ADRs, reviewing architectural decisions, enforcing technical guardrails * Systems thinking: long-term vision, balanced quality scorecard, strategic platform evolution ***Communication & Influence*** * Translating technical complexity into business value: executive presentations, quantified impact, ROI of technical investments * Cross-functional collaboration: negotiating with security, infrastructure, product, and stakeholders; building consensus * Excellence in technical documentation: ADRs, runbooks, design documents, architecture diagrams * Public speaking & knowledge sharing: technical talks, workshops, contributions to open-source communities ***Solving Complex Problems*** * Crisis leadership: critical production incidents, agile diagnosis using multiple sources (Dynatrace, logs, metrics), clear communication * Structured RCA: analysis of multiple root causes, implementation of definitive fixes, recurrence prevention * Balanced pragmatism: decisions between "perfect" vs "deliverable", risk mitigation, technical debt planning * Comfort with ambiguity: initiating design in evolving requirement contexts, technological pivots ***Ownership & Product Mindset*** * Strategic ownership: responsibility not only to execute but also to question and evolve technical strategy * Advanced shift-left: embedding security, performance, monitoring, and testability from day one of design * Continuous improvement: identifying anti-patterns, proposing refactorings, investing in technical infrastructure * Product mindset: business understanding, conscious trade-offs, delivering value with excellence ***Technology Stack*** * Backend: .NET Core, C#, .NET 8+/10, async patterns, advanced LINQ * Cloud: Google Cloud Platform (Pub/Sub, Apigee, Secret Manager, Compute Engine, Cloud Run) * Caching & Databases: Redis, PostgreSQL, query optimization, schema design * Containerization: Docker, image optimization, registry security * Orchestration: Kubernetes, Helm, operators, RBAC * Version Control: GitLab (advanced workflows, RBAC, CI/CD) * Security: SAST/DAST, SonarQube, OAuth 2.0, OpenID Connect, mTLS, secret management * Observability: Dynatrace, distributed tracing, SLO/SLI * Architecture: SOLID, Clean Architecture, DDD, CQRS, Event-Driven, Microservices, Zero Trust **Requirements and Qualifications** **Mandatory Requirements:** * Degree in Computer Engineering, Computer Science, or related field * Minimum 8+ years of backend development experience, including at least 4+ years at senior or specialist level * Deep expertise in .NET Core and C# (advanced patterns, async, memory management) * Mastery of software architecture (SOLID, Clean Architecture, DDD, CQRS, Event-Driven) * Extensive experience in secure development and OWASP Top 10 mitigation * Hands-on experience with Google Cloud Platform, especially Pub/Sub and Apigee * Advanced proficiency in Docker and Kubernetes * Experience with GitLab and advanced CI/CD (complex pipelines, DevSecOps) * Experience with observability and tools such as Dynatrace * Proven technical leadership: mentoring, code reviews, standard dissemination * Ability to operate with full autonomy, systemic vision, and strong technical accountability * Excellent Portuguese communication skills (English is desirable) **Nice-to-Have:** * Certification or proven expertise in Google Cloud (ACE, Professional, etc.) * Experience with Dynatrace in mission-critical environments * Publications, technical talks, or open-source contributions in distributed architecture * Experience with SRE practices, incident management, and post-mortems * ADRs and technical governance in large organizations * Experience across multiple domains: fintech, banking, high-traffic systems * Fluent English * Positive references regarding technical leadership in prior roles **Expected Profile:** * Passionate about engineering excellence, architecture, and the