Staff Software Engineer (Remote) (Position located in Brazil)

Role Summary
KnowBe4's Platform Services group builds the infrastructure that every product team depends on. At the Staff level, you're not just contributing to that foundation — you're shaping it. You'll work at the intersection of identity, platform reliability, and developer experience, solving problems that have direct impact on every engineer and every customer at KnowBe4.

The identity and auth platform you'll help lead underpins session management, single sign-on, user provisioning, and cross-product authorization for the entire KnowBe4 product suite. The decisions made here ripple across every engineering team at KnowBe4 and the end-user sessions of a global customer base. We need engineers who can think at that scale, communicate across organizational boundaries, and write production-quality code — not just direct others to.

This is a technical individual contributor role. You'll lead through your engineering, your judgment, and your ability to bring others along with you.

What You'll Build

• Session and identity APIs in Rust deployed as AWS Lambda functions — high-throughput, low-latency services handling JWT validation, session lifecycle, and encrypted token management across multiple AWS regions
• Identity provider integrations — orchestration and configuration of Auth0 and Keycloak tenants, IDP sync services, and SSO/OIDC broker logic that spans legacy and modern auth systems
• User provisioning and lifecycle services — the USPS (User Provisioning Service) and UPMS (User Permission Management Service) layers that synchronize user state across products, CRM systems, and identity stores
• Cross-team platform SDKs — auth libraries in Rust, C#, and TypeScript consumed by multiple engineering teams; these are the APIs that teams depend on, so design quality and backward compatibility matter deeply
• Distributed event infrastructure — DFS (Distributed Feedback Service) subscribers, SQS-based event pipelines, and the message routing layer that coordinates state changes across bounded contexts
• Infrastructure-as-Code at scale — multi-account, multi-region Terraform that provisions and governs the identity and platform layer across development, staging, and production environments
• Technical direction — architecture reviews, RFC-style design proposals, mentorship of senior engineers, and cross-team coordination on platform-level changes

Essential Responsibilities

• Develops software using the KnowBe4 Software Development Lifecycle and Agile Methodologies
• Assists other team members by providing technical direction
• Defines approaches and solutions to complex technical problems
• Makes significant contributions in new technology, sometimes resulting in patents, trade secrets, and/or professional publications and presentations
• Translates KnowBe4's strategic goals into operational plans
• Provides coordination across functional boundaries
• May act as team lead for larger sub-projects or entire, small projects

Skills Requirements

• Strong backend engineering fundamentals in a typed, compiled language — Rust, C#, Go, Java, or equivalent; depth in one, curiosity about others
• AWS serverless architecture — Lambda (multi-runtime), DynamoDB, SQS, SSM, API Gateway, IAM; experience designing systems, not just using them
• Identity and auth concepts — OIDC, OAuth 2.0, JWT, SSO; you understand the flows, the attack surfaces, and the tradeoffs; deep implementation experience is a strong plus
• Distributed systems design — event-driven architecture, eventual consistency, message queues, idempotency, saga patterns
• Terraform at scale — multi-account, multi-region IaC; module design, state management, OIDC-based CI deploy patterns
• API design leadership — designing APIs consumed by multiple teams; versioning strategy, backward compatibility, contract testing
• GitLab CI/CD — pipeline design, shared components, multi-environment deployment patterns
• Technical communication — design docs, RFCs, architecture reviews; ability to synthesize complexity into clear proposals

Preferred / Nice-to-Have

• Rust — production experience is a strong differentiator; familiarity with the async ecosystem (tokio, axum, reqwest, serde) particularly valued
• C# / .NET (8+) — Lambda AOT compilation, ASP.NET Core, Native AOT targeting linux-arm64
• Auth0 — tenant administration, custom actions, SAML/OIDC/OAuth app configuration, Management API
• Keycloak — realm configuration, custom providers, integration with external IDPs
• TypeScript + Vue 3 — the platform layer includes frontend surfaces; full-stack comfort is valued even at the Staff level
• Python — event-processing services and tooling in this layer use Python
• Security engineering concepts — threat modeling, zero-trust principles, secrets management, credential rotation

Education & Experience

• BS or equivalent plus 10 years of experience
• MS or equivalent plus 5 years of experience
• Ph.D. or equivalent plus 4 years of experience