Principal Engineer – Identity Management (IAM & Golang Backend)

1 hour, 57 minutes ago
Full-time
Lead
Software Development
Xsolla

Xsolla

Xsolla is an international payment solution provider for online games, offering tools to launch, monetize, and scale games worldwide with local payment methods and fraud prevention.

Internet Software & Services
251-1K
Founded 2005

Description

  • Architect and lead the design of the next-generation identity platform for authentication, authorization, SSO, and account federation.
  • Develop high-performance Golang microservices for user identity, access token management, and permission enforcement at global scale.
  • Collaborate with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance.
  • Integrate IAM standards and protocols such as OAuth2, OIDC, SAML, and SCIM to support developer and partner integrations.
  • Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
  • Partner with product teams to deliver scalable, compliant, and user-friendly identity features such as player login, entitlement management, and account linking.
  • Define and enforce API and data security standards in support of compliance initiatives including GDPR, SOC 2, and ISO 27001.
  • Evaluate and integrate third-party IAM frameworks or open-source solutions such as Keycloak, Auth0, and ForgeRock as part of a hybrid identity strategy.

Requirements

  • 10+ years of experience in backend or systems engineering.
  • 5+ years designing and implementing IAM or authentication services.
  • Expert-level Golang experience, including building and scaling distributed, event-driven microservices.
  • Proven experience with identity federation, token management, and access control systems.
  • Strong understanding of authentication and authorization standards including OAuth 2.0, OIDC, SAML, JWT, and SCIM.
  • Solid knowledge of security principles, encryption, key management, and secrets management tools such as HashiCorp Vault or AWS KMS.
  • Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure.
  • Strong architectural vision with the ability to influence cross-team design and technology direction.
  • Excellent communication and collaboration skills across distributed teams.
  • Preferred experience building identity systems for gaming or SaaS ecosystems.
  • Preferred familiarity with multi-tenant architectures, RBAC/ABAC models, and policy-as-code tools such as OPA.
  • Preferred background in security engineering, DevSecOps, or compliance automation.
  • Preferred contributions to open-source Golang or IAM projects.

Benefits

  • $180,000 - $250,000 annual salary range for Los Angeles, CA, based on location and experience.
  • 100% company-paid medical, dental, and vision coverage.
  • Unlimited Flexible Time Off.
  • Personalized career roadmap for each employee.
  • Training and educational opportunities for professional development.
  • Supportive environment focused on employees’ physical, mental, and emotional well-being.
  • Equal opportunity employment and an inclusive workplace culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Security Engineer - Product Security

Spotify Media

Spotify is hiring a Security Engineer for its Product Security team in London or Stockholm to help secure engineering initiatives, application development, and AI-driven systems at global scale.

Agile C++ Encryption Generative AI Java Machine Learning Python Scala TypeScript
12 minutes ago

Technical Lead, Platform

Atria Institute 51-250 Health Care Providers & Services

Atria Health is seeking a Technical Lead for its Platform Engineering team to build the foundational systems, integrations, and internal tooling that support clinical and product teams across its preventive healthcare platform.

Express.js GCP GitHub HIPAA Microservices Mixpanel MySQL Node.js PostgreSQL React Redis TypeScript
12 minutes ago

Senior Security Engineer

NextGen Federal Systems 51-250 Internet Software & Services

NextGen Federal Systems is seeking a remote Senior Security Engineer to support a federal customer in Clarksburg, WV on a multi-year effort to improve the efficiency and security of large-scale IT systems.

Agile AWS Kafka
27 minutes ago

Detection & Response Engineer

Law360 251-1K Media

Veda is hiring a remote Detection & Response Engineer to protect its hybrid Web2+Web3 DeFi infrastructure by building detection, incident response, and security automation across cloud, container, and blockchain environments.

AWS Azure Blockchain Elasticsearch GCP Go Kubernetes Machine Learning Python Rust Secrets Management SIEM Splunk
27 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers