This role is a senior individual contributor on the GitHub Governance team, sharing technical ownership of the platform's surface with the existing senior engineers. The role is hands-on and execution-heavy: shipping platform changes, building automation, partnering with InfoSec on IAM and Datasec design decisions, and contributing senior judgment to the team's most exposed work. The role operates with autonomy, owning problems end-to-end, making technical calls within their scope without waiting for direction, and knowing when to escalate versus move forward.
What the person will own
As a Senior Software Engineer you will work across the team's portfolio, owning the slices that fit their depth and partnering on the rest. The current portfolio includes KPMG audit response and evidence collection, EMU migration (user-profile migration is the active Wave 1, with the Identity Hub workaround as the path forward), rollouts including Copilot Code Review, vibe-coding profile work and the connected guardrails, the inactivity-rule design, and IP control mechanisms.
Beyond execution, you will be a senior voice in the team's design discussions: architecture decisions, integration patterns with Identity Hub, ITSec/IAM/Datasec touchpoints, and the cross-pack discussions with Coding Tools, AI Enablement, and Enterprise Solutions. You will be one of the engineers shaping how GitHub-change governance works in practice at Nubank.
This role will also serve as a technical partner in shaping the team's GitHub platform strategy, working alongside the PM to evaluate GitHub's product roadmap, anticipate how upcoming features affect Nubank's governance model.
What we are looking for
Must-have
Demonstrated depth administering GitHub Enterprise at scale (10,000+ users), including EMU (Enterprise Managed Users), organization and repo-level policy design, and rulesets.
Hands-on experience with GitHub Copilot administration and rollout at an organizational level.
Proficiency with the GitHub API and automation via GitHub Actions, including building or maintaining CODEOWNERS structures and branch protection patterns at scale.
Working knowledge of GitHub audit logs and the ability to trace a policy decision through to its downstream effects on users, repositories, audit trails, and connected systems.
Prior experience operating within a regulated engineering organization, with working knowledge of how InfoSec, IAM, and Datasec functions interact with a platform engineering team.
Track record of working cross-functionally with security leadership, tooling/enablement teams, and engineering stakeholders — writing clearly, pushing back constructively, and building trust quickly across functions without formal authority over those teams.
Nice-to-have
Experience supporting or shaping an organization's AI-adoption strategy as it intersects with developer tooling and platform policy (e.g., Copilot governance, AI-assisted coding guardrails).
Familiarity with running GitHub Enterprise in a multi-business-unit or multi-pack organizational structure, including navigating competing stakeholder priorities.
Experience partnering directly with external auditors (e.g., Big Four firms) on platform-level compliance evidence or remediation.
Our Benefits
Chance of earning equity at Nubank
Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
Public Transportation Commuting Benefit (Vale-Transporte)
NuCare – Psychological, Financial and Legal Assistance Program
Life Insurance
Medical Plan
Dental Plan
NuLanguage – Language Course Program
Nucleo - Our learning platform of courses
Extended Parental Leave
Daycare Allowance
Parental Consultancy
Work-from-home Allowance
Gym Partnerships
30 days of paid vacation
Work Model for this Role
Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/