RemoteLeaf Logo
Log in Sign up

Principal Engineer – Identity Management (IAM & Golang Backend)

5 months, 1 week ago
Anywhere
Full-time
Lead
Security Engineer
Software Development
AWS Azure Encryption GCP Go HashiCorp Vault JWT Kubernetes Microservices OpenID Connect SAML Secrets Management
Apply Now
Xsolla

Xsolla

Xsolla is an international payment solution provider for online games, offering tools to launch, monetize, and scale games worldwide with local payment methods and fraud prevention.

Internet Software & Services
251-1K
Founded 2005
View All Jobs 92

Description

  • Architect and lead the design of the next-generation identity platform for authentication, authorization, SSO, and account federation.
  • Develop high-performance Golang microservices for user identity, access token management, and permission enforcement at global scale.
  • Collaborate with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance.
  • Integrate IAM standards and protocols such as OAuth2, OIDC, SAML, and SCIM to support developer and partner integrations.
  • Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
  • Partner with product teams to deliver scalable, compliant, and user-friendly identity features such as player login, entitlement management, and account linking.
  • Define and enforce API and data security standards in support of compliance initiatives including GDPR, SOC 2, and ISO 27001.
  • Evaluate and integrate third-party IAM frameworks or open-source solutions such as Keycloak, Auth0, and ForgeRock as part of a hybrid identity strategy.

Requirements

  • 10+ years of experience in backend or systems engineering.
  • 5+ years designing and implementing IAM or authentication services.
  • Expert-level Golang experience, including building and scaling distributed, event-driven microservices.
  • Proven experience with identity federation, token management, and access control systems.
  • Strong understanding of authentication and authorization standards including OAuth 2.0, OIDC, SAML, JWT, and SCIM.
  • Solid knowledge of security principles, encryption, key management, and secrets management tools such as HashiCorp Vault or AWS KMS.
  • Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure.
  • Strong architectural vision with the ability to influence cross-team design and technology direction.
  • Excellent communication and collaboration skills across distributed teams.
  • Preferred experience building identity systems for gaming or SaaS ecosystems.
  • Preferred familiarity with multi-tenant architectures, RBAC/ABAC models, and policy-as-code tools such as OPA.
  • Preferred background in security engineering, DevSecOps, or compliance automation.
  • Preferred contributions to open-source Golang or IAM projects.

Benefits

  • $180,000 - $250,000 annual salary range for Los Angeles, CA, based on location and experience.
  • 100% company-paid medical, dental, and vision coverage.
  • Unlimited Flexible Time Off.
  • Personalized career roadmap for each employee.
  • Training and educational opportunities for professional development.
  • Supportive environment focused on employees’ physical, mental, and emotional well-being.
  • Equal opportunity employment and an inclusive workplace culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Lingaro

Data Engineering Tech Lead - freelance

Lingaro 5K-10K IT Services

Lead a data engineering team in delivering scalable, secure, and efficient data solutions while advising customers and coordinating project execution across stakeholders.

Poland Freelance Lead Data Engineer Technical Lead
Azure CI/CD Python Scala SQL
18 hours, 32 minutes ago
Proficio

MEDR Threat Engineer US work hours

Proficio 51-250 Professional Services

Proficio is seeking a Managed EDR Threat Engineer to guide the evolution of its managed endpoint detection, response, visibility, and prevention services while collaborating with engineering, SOC, MDR, sales, and customer teams.

India Full-time Mid Level Security Engineer
Carbon Black Cybersecurity Linux macOS Network Security PowerShell Python
18 hours, 47 minutes ago
K.L. Scott & Associates

DevSecOps and Security Compliance Engineer

K.L. Scott & Associates 11-50 Professional Services

K.L. Scott & Associates, LLC is hiring a DevSecOps and Security Compliance Engineer to integrate security into SAP delivery and operations for federal clients while improving deployment controls, addressing vulnerabilities, and maintaining authorization evidence.

Anywhere Full-time Lead DevOps Engineer Security Engineer
CI/CD DevSecOps SAP Secrets Management
18 hours, 47 minutes ago
Hack The Box

Senior Defensive Content Engineer

Hack The Box 51-250 Internet Software & Services

Hack The Box is seeking a Senior Defensive Content Engineer to create and validate cyber ranges, threat-hunting labs, and defensive learning experiences that strengthen enterprise cybersecurity capabilities.

Greece United Kingdom Full-time Senior Security Engineer
Ansible Linux SIEM Terraform Wireshark
18 hours, 47 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers