RemoteLeaf Logo
Log in Sign up

Principal Engineer – Identity Management (IAM & Golang Backend)

4 months, 3 weeks ago
Anywhere
Full-time
Lead
Security Engineer
Software Development
AWS Azure Encryption GCP Go HashiCorp Vault JWT Kubernetes Microservices OpenID Connect SAML Secrets Management
Apply Now
Xsolla

Xsolla

Xsolla is an international payment solution provider for online games, offering tools to launch, monetize, and scale games worldwide with local payment methods and fraud prevention.

Internet Software & Services
251-1K
Founded 2005
View All Jobs 90

Description

  • Architect and lead the design of the next-generation identity platform for authentication, authorization, SSO, and account federation.
  • Develop high-performance Golang microservices for user identity, access token management, and permission enforcement at global scale.
  • Collaborate with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance.
  • Integrate IAM standards and protocols such as OAuth2, OIDC, SAML, and SCIM to support developer and partner integrations.
  • Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
  • Partner with product teams to deliver scalable, compliant, and user-friendly identity features such as player login, entitlement management, and account linking.
  • Define and enforce API and data security standards in support of compliance initiatives including GDPR, SOC 2, and ISO 27001.
  • Evaluate and integrate third-party IAM frameworks or open-source solutions such as Keycloak, Auth0, and ForgeRock as part of a hybrid identity strategy.

Requirements

  • 10+ years of experience in backend or systems engineering.
  • 5+ years designing and implementing IAM or authentication services.
  • Expert-level Golang experience, including building and scaling distributed, event-driven microservices.
  • Proven experience with identity federation, token management, and access control systems.
  • Strong understanding of authentication and authorization standards including OAuth 2.0, OIDC, SAML, JWT, and SCIM.
  • Solid knowledge of security principles, encryption, key management, and secrets management tools such as HashiCorp Vault or AWS KMS.
  • Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure.
  • Strong architectural vision with the ability to influence cross-team design and technology direction.
  • Excellent communication and collaboration skills across distributed teams.
  • Preferred experience building identity systems for gaming or SaaS ecosystems.
  • Preferred familiarity with multi-tenant architectures, RBAC/ABAC models, and policy-as-code tools such as OPA.
  • Preferred background in security engineering, DevSecOps, or compliance automation.
  • Preferred contributions to open-source Golang or IAM projects.

Benefits

  • $180,000 - $250,000 annual salary range for Los Angeles, CA, based on location and experience.
  • 100% company-paid medical, dental, and vision coverage.
  • Unlimited Flexible Time Off.
  • Personalized career roadmap for each employee.
  • Training and educational opportunities for professional development.
  • Supportive environment focused on employees’ physical, mental, and emotional well-being.
  • Equal opportunity employment and an inclusive workplace culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Elastic

Principal Software Engineer (Application Networking) - Platform Infrastructure

Elastic 1K-5K Internet Software & Services

Elastic is hiring a Principal Software Engineer for its Platform Infrastructure–Application Networking team to define the technical direction of Elastic Cloud’s ingress, connectivity, DNS, and security systems.

Portugal Full-time Lead Technical Lead
$68k-$88k
AWS Azure DNS GCP Kubernetes
15 hours, 16 minutes ago
HubSpot

Staff Technical Lead - Marketing Studio Intelligence

HubSpot 5K-10K Media

HubSpot is seeking a Staff Technical Lead in Ireland to lead a small engineering team and build scalable backend and AI systems powering Marketing Studio Intelligence.

Ireland Full-time Lead Technical Lead
$143k-$207k
Java Kafka Microservices MySQL Python System Design
15 hours, 31 minutes ago
9th Way Insignia

Quantum Computing Cryptography Engineer

9th Way Insignia 51-250 Internet Software & Services

9th Way Insignia is hiring an Engineer 3, Quantum Computing/Cryptography Engineer to support the VA’s cybersecurity modernization efforts by assessing quantum-related risks and advancing quantum-resistant cryptographic solutions.

United States Full-time Lead Security Engineer
$98k-$162k
C++ Cybersecurity Encryption Java Python
15 hours, 46 minutes ago
9th Way Insignia

DevSecOps Engineer

9th Way Insignia 51-250 Internet Software & Services

9th Way Insignia is hiring an Engineer 3, DevSecOps Engineer to support VA cybersecurity and modernization efforts by securing and automating software delivery across enterprise and cloud environments.

United States Full-time Lead DevOps Engineer Security Engineer
$98k-$135k
CI/CD Cybersecurity DevSecOps Git
16 hours, 1 minute ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers