[Job - 28075] Software Architect, Brazil
- Ciandt
- Remote Brazil
Job Description
We are looking for a hands-on Software Architect to translate high-level architecture direction into scalable, maintainable software designs. Guide the engineering team to deliver high-quality, observable, and testable code aligned with product and architectural goals. The role combines system design, engineering leadership, and operational ownership, working closely with product, platform, and engineering teams.
Responsibilities:
- Solution & Vision: Craft and maintain C4 diagrams, technical roadmaps, and Architecture Decision Records (ADRs) that balance functional requirements, performance budgets, security, and cost models.
- Technical Leadership: Drive decision‑making through whiteboard sessions and proofs‑of‑concept; champion design patterns (hexagonal, event‑driven, reactive) and modern non‑functional requirement trade‑offs (for example, CAP theorem).
- Backlog & Planning: Partner with Product Owners to decompose epics into tech user stories, help the team with the estimation, and risk‑flag stories so they’re technically “Ready” and aligned with the architecture runway.
- Mentorship & Knowledge Transfer: Coach and mentor mid and senior‑level engineers in architecture principles, design patterns, and code quality to accelerate our team’s growth toward senior and architecture roles.
- Code & Quality Gates: Define coding standards; review pull requests for readability and test coverage; embed SpotBugs and SonarQube; collaborate with QA to automate smoke, performance, and security tests.
- CI/CD & Platform Modernization: Own and optimize pipelines (Tekton/Jenkins to ArgoCD); assess and drive remediation of technical debt; plan platform modernization (monolith to microservices); adopt emerging technologies where appropriate.
- Observability & Resilience: Define dashboards and SLIs; implement structured logging and distributed tracing; drive operational excellence through metrics, monitoring, and resilience validation practices.
Required Skills:
- Strong experience with:
Advanced knowledge of Java 21 and modern JVM-based backend development
Spring Boot 3.x ecosystem, including Spring Web (REST APIs), Spring Security (OAuth2 Resource Server), Spring Data JPA / Hibernate, and Spring Cache (Redis)
Designing and operating RESTful APIs and event-driven architectures
Apache Kafka (producers, consumers, consumer groups, retry strategies, DLQ patterns)
PostgreSQL (schema design, query optimization, JPA/Hibernate mappings)
Redis for caching and ephemeral data
Docker and Kubernetes (Deployments, Services, Ingress, ConfigMaps, Secrets, probes, rollout/rollback strategies)
Cloud-native environments on Google Cloud Platform (GCP), including GKE
CI/CD pipelines and GitOps workflows, including Tekton pipelines and ArgoCD
Observability practices, including structured logging, metrics, and monitoring
Automated testing using JUnit 5, Mockito, and Testcontainers
Spring Boot 3.x ecosystem, including Spring Web (REST APIs), Spring Security (OAuth2 Resource Server), Spring Data JPA / Hibernate, and Spring Cache (Redis)
Designing and operating RESTful APIs and event-driven architectures
Apache Kafka (producers, consumers, consumer groups, retry strategies, DLQ patterns)
PostgreSQL (schema design, query optimization, JPA/Hibernate mappings)
Redis for caching and ephemeral data
Docker and Kubernetes (Deployments, Services, Ingress, ConfigMaps, Secrets, probes, rollout/rollback strategies)
Cloud-native environments on Google Cloud Platform (GCP), including GKE
CI/CD pipelines and GitOps workflows, including Tekton pipelines and ArgoCD
Observability practices, including structured logging, metrics, and monitoring
Automated testing using JUnit 5, Mockito, and Testcontainers
gRPC service communication
WebSockets for event streaming
OAuth2 / OIDC authentication flows and JWT validation
OPA (Open Policy Agent) for policy-based authorization
Identity broker integrations and token validation flows
Google Cloud services, including Cloud Logging, Cloud Monitoring, and GCS
Helm or Kustomize for Kubernetes manifest templating
MapStruct and Lombok in Spring-based applications
JVM performance tuning basics
Cloud networking fundamentals (VPC, subnets, load balancers)
WebSockets for event streaming
OAuth2 / OIDC authentication flows and JWT validation
OPA (Open Policy Agent) for policy-based authorization
Identity broker integrations and token validation flows
Google Cloud services, including Cloud Logging, Cloud Monitoring, and GCS
Helm or Kustomize for Kubernetes manifest templating
MapStruct and Lombok in Spring-based applications
JVM performance tuning basics
Cloud networking fundamentals (VPC, subnets, load balancers)
Nice to have:
- Terraform
- mTLS implementations
- Pub/Sub messaging patterns
- gRPC streaming
- Advanced Kafka patterns (schema evolution, idempotent producers)
- Kubernetes networking concepts (CNI, Network Policies)
- Sidecar security patterns (OPA / Identity Broker)
- Contract testing
- Performance testing tools (JMeter, Gatling)Spanish
- Exposure to frontend architecture (e.g., Angular, RxJS) for cross-functional alignment.
- Experience with performance tuning, cost optimisation, or SLA/SLO definition.
- Familiarity with architecture runway planning or domain-driven design (DDD).
- Hands-on with observability stacks (Prometheus, Grafana, OpenTelemetry).
