**VOLL was born to simplify mobility with a single, global solution. It is the most widely used technology by Brazil’s largest companies to manage their teams’ travel and relocation.** Would you like to be part of this? We’re looking for people eager to revolutionize how professionals move around the world — and now also how our customers connect with our platform. We are ISO 27001 certified, a commitment we’ve upheld since day one, given that we handle sensitive travel and expense data from hundreds of companies. We’re expanding this trust into a new frontier: exposing part of our platform to agents and customer integrations via MCP (Model Context Protocol). You’ll join the Developer Experience (DevEx) team, responsible for platformizing engineering across VOLL — building foundational capabilities (API Gateway, authentication, authorization, secure service exposure) that product teams use to deliver value rapidly, without compromising security. Our engineering culture values: * Security as a product, not a gate: the secure path must be the easiest, not the most bureaucratic. * Autonomy with responsibility: squads own their domain, with technical freedom and accountability for the impact of what they build. * Horizontal collaboration: you’ll work side-by-side with Cybersecurity and Product Engineering, without rigid hierarchy between "who approves" and "who executes". If you enjoy solving identity, authentication, and large-scale API exposure challenges, this role is for you. **Responsibilities and duties** **What you’ll do:** * Lead the evolution of the API Gateway as a secure exposure layer, complementing the existing WAF with rate limiting, schema validation, and self\-service onboarding for new APIs. * Define and evolve the authentication and authorization architecture (OAuth2, OIDC, JWT) for APIs exposed to external customers. * Design security guardrails for public exposure of MCP servers: client authentication, tool scoping (tools), per\-client/tenant limits, and abuse prevention. * Define authorization standards between internal services (mTLS, service\-to\-service access policies). * Build reusable libraries and components that product teams integrate to expose APIs securely by\-default. * Serve as the technical point of contact with Cybersecurity/AppSec to align on externally exposed surfaces. * Identify and prioritize security gaps in external exposure before they become incidents. * Review product team architectures exposing new services externally, focusing on authentication and authorization. * *Objectives may extend beyond this initial scope, involving additional challenges in architecture, back\-end, messaging, and security, aligned with platform evolution and team needs.* **Requirements and qualifications** **Basic requirements:** * Proven experience as a Platform Engineer or Senior Software Developer, building tools/infrastructure consumed by other teams. * API Gateway architecture and management (Kong, Apigee, AWS API Gateway or similar). * Authentication and authorization applied to external APIs: OAuth2, OIDC, JWT, key rotation. * Service-to-service authorization in distributed environments, including mTLS. * Secure software development (OWASP), with focus on externally exposed application security. * Microservices and event-driven architecture design. * Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or related fields. **Nice-to-have:** * Experience exposing MCP servers or similar integration protocols with AI agents. * Prior experience working with Cybersecurity/AppSec. * Experience with VPC Lattice, ECS Service Connect, or service mesh. * Advanced English and/or Spanish. **Additional information** **Our benefits package:** * Meal/food allowance on Flash card; * Sulamérica Medical and Dental Plan; * Total Pass; * Remote work allowance on Flash card; * Mental health support (VOLL Care); * Education assistance through (VOLL Education); * Group life insurance; * 6-month maternity leave; * 30-day paternity leave (Our parental leave policy applies equally to same-sex couples). * Vacation starting after 6 months; * Day off. **Diversity at VOLL** At VOLL, we value every person and their uniqueness, offering an environment that respects diversity and individuality. Here, you have space to be yourself \#TogetherOnTheSameBoat. VOLL exists to transform innovative ideas into solutions shaping the future of corporate travel, mobility, and expenses. We pioneered the world’s first integrated mobility and travel app, unifying every step of the journey — from booking to payment. Our platform aims to deliver the best for both managers and corporate travelers, with comprehensive solutions that simplify and integrate all needs in one place. This is the result of extraordinary work by over 400 collaborators across more than 17 states. **OUR VALUES** Execute with mastery; Play fair; Stand together on the same boat; Be protagonists; Be strong. \#ToInfinity
João Silva
Indeed · HR
João Silva
Indeed · HR
