Staff Software Engineer — Identity & Access Management

1 month, 4 weeks ago
Full-time
Lead
Software Development
Xsolla

Xsolla

Xsolla is an international payment solution provider for online games, offering tools to launch, monetize, and scale games worldwide with local payment methods and fraud prevention.

Internet Software & Services
251-1K
Founded 2005

Description

  • Own the technical strategy and architecture of the IAM platform across authentication, authorization, and session management.
  • Design and evolve OAuth 2.0 / OIDC flows, token lifecycle, and related security primitives.
  • Drive protocol, data modeling, and platform reliability decisions while building alignment across engineering and security teams.
  • Identify systemic risks and performance bottlenecks and lead efforts to resolve them before they become incidents.
  • Define engineering standards and review critical code and designs.
  • Create leverage for the team through documentation, tooling, and mentorship.
  • Collaborate with product, security, and infrastructure teams to translate business needs into technical plans.
  • Serve as the escalation point for complex production IAM issues.

Requirements

  • Deep understanding of OAuth 2.0, OIDC, and related auth flows, including authorization code + PKCE, client credentials, device flow, token introspection, and refresh strategies.
  • Solid understanding of cookie security, CSRF, XSS, token storage, TLS, and secure session management.
  • Experience designing or operating production-grade IAM or authentication systems.
  • Strong Go (Golang) engineering skills, including idiomatic code, concurrency patterns, and performance profiling.
  • Experience with distributed systems and their trade-offs, including consistency, availability, and failure modes.
  • Experience with PostgreSQL schema design, query optimization, and large-scale migrations.
  • Experience deploying, operating, and debugging services in Kubernetes.
  • Experience with Kafka or NATS, including event-driven patterns, consumer groups, and at-least-once delivery.
  • Proven ability to lead multi-quarter technical initiatives across teams and influence architecture beyond your immediate team.
  • Strong written and verbal communication skills, including writing RFCs and design docs that people actually read.
  • Experience working in the video game industry or building platforms for game developers, publishers, or players.
  • Hands-on experience with the Ory ecosystem (Hydra, Kratos, Keto) in production or via its APIs, preferred.
  • Experience with CockroachDB or other distributed SQL databases, preferred.
  • Familiarity with IAM-related compliance requirements such as SOC 2, ISO 27001, GDPR data minimization, and audit logging, preferred.
  • Contributions to open-source security or identity projects, preferred.
  • Experience building or integrating with SCIM, SAML, or enterprise SSO (LDAP / Active Directory), preferred.
  • Background in platform or infrastructure engineering, preferred.
  • Up-to-date experience with modern AI tools such as Claude, Copilot, or Cursor for coding and review, preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Appian Consultant (FMS)

Horizon Industries Limited is hiring a remote, full-time Appian Consultant to support Foreign Military Sales through Appian development, solution delivery, and growing technical ownership.

Agile MySQL Oracle PostgreSQL SQL
16 hours, 50 minutes ago

Principal Software Engineer, Pricing Platform

Upstart 1K-5K Banks

Upstart is seeking a Principal Software Engineer to provide cross-functional technical leadership and evolve the scalable pricing platform that converts machine-learning underwriting outputs into real-time pricing decisions across its lending products.

AWS Celery Datadog Django FastAPI Go gRPC Helm Java Kotlin Kubernetes Machine Learning Microservices PostgreSQL Prototyping Python Rust Spring Boot Statistics
16 hours, 50 minutes ago

Staff Software Engineer, Backend (Identity International)

Affirm 1K-5K Diversified Financial Services

Affirm is hiring a senior backend engineering leader for its International Expansion Unit in the UK to set technical strategy and evolve global identity systems supporting compliant market expansion, customer trust, and business growth.

Apache Spark AWS Kotlin Kubernetes MySQL Python
17 hours, 5 minutes ago

Quantum Computing / Cryptography Engineer

MKS2 Technologies 51-250 Internet Software & Services

MKS2 Technologies is seeking a remote Quantum Computing / Cryptography Engineer to support a federal program by advancing cryptographic modernization, quantum readiness, and post-quantum security migration planning.

C++ Cybersecurity Encryption Java Python
17 hours, 35 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers