Software Engineer II, Backend – Platform

About the role

This hybrid position in São Paulo joins Uber's Login Services team within Core Security Engineering. You will help shape the future of authentication for both human and non‑human identities, building secure, reliable login experiences at massive scale.

Key responsibilities

• Own and deliver a well‑scoped slice of Uber’s authentication stack, improving security and login reliability.
• Design, implement, and extend core auth services and workflows (APIs, policy checks, token/session flows) following architectural guidance.
• Enhance tier‑zero SSO/login health through bug fixes, performance tuning, and availability‑focused changes.
• Ship production‑ready code with strong testing, rollout/rollback safety, and clear operational documentation.
• Add observability (metrics, logs, traces), dashboards, and alerts; participate in on‑call rotations and drive incident follow‑ups.
• Automate IAM operational tasks (self‑service flows, remediation tools, ticket helpers).
• Contribute to the Security Knowledge Platform by implementing data, graph, and risk‑signal features.
• Collaborate cross‑functionally with Security, IT, Ops, and Product teams, communicating risks early and participating in design and incident reviews.

Required profile

• Bachelor’s degree in Computer Science, Engineering, Mathematics or related field, OR 4+ years of experience building backend services or platform systems in production.
• Proficiency in at least one major language (Go, Java, Python, or TypeScript) and ability to learn the team’s stack.
• Experience building and operating distributed services, including APIs, data stores, asynchronous workflows, and service‑to‑service integrations.
• Demonstrated operational excellence: monitoring, alerting, debugging, incident participation, and improving SLAs.
• Working knowledge of security fundamentals such as authentication flows, sessions/tokens, and least‑privilege principles.

Required skills

• Go
• Java
• Python
• TypeScript
• API development
• Distributed services
• Asynchronous workflows
• Service‑to‑service integration
• Monitoring and alerting
• Incident response
• Authentication mechanisms
• Token management
• Security fundamentals