RemoteLeaf Logo
Log in Sign up

Staff Software Engineer — Identity & Access Management

3 weeks ago
Serbia
Full-time
Lead
Security Engineer
Software Development
Active Directory CI/CD CockroachDB Git Go Kafka Kubernetes NATS OpenID Connect PostgreSQL SAML TLS
Apply Now
Xsolla

Xsolla

Xsolla is an international payment solution provider for online games, offering tools to launch, monetize, and scale games worldwide with local payment methods and fraud prevention.

Internet Software & Services
251-1K
Founded 2005
View All Jobs 86

Description

  • Own the technical strategy and architecture for the IAM platform, including authentication, authorization, and session management at scale.
  • Design and evolve OAuth 2.0 and OIDC flows, token lifecycle, and security primitives to meet product and compliance needs.
  • Drive decisions on protocol design, data modeling, and platform reliability across engineering and security stakeholders.
  • Identify systemic risks and performance bottlenecks and lead efforts to resolve them before they become incidents.
  • Define engineering standards and review critical code and designs.
  • Create leverage for the team through documentation, tooling, and mentorship.
  • Collaborate with product, security, and infrastructure teams to align roadmap priorities and technical plans.
  • Serve as the escalation point for complex production issues in the IAM domain.

Requirements

  • Deep understanding of OAuth 2.0, OIDC, and related auth flows, including authorization code + PKCE, client credentials, device flow, token introspection, and refresh strategies.
  • Solid grasp of cookie security, CSRF, XSS, token storage, TLS, and secure session management.
  • Experience designing or operating production-grade IAM or authentication systems.
  • Strong Go (Golang) engineering skills, including idiomatic code, concurrency patterns, and performance profiling.
  • Experience with distributed systems and their trade-offs, including consistency, availability, and failure modes.
  • Experience with PostgreSQL schema design, query optimization, and migrations at scale.
  • Experience deploying, operating, and debugging services in Kubernetes.
  • Experience with Kafka or NATS and event-driven patterns, consumer groups, and at-least-once delivery.
  • Proven ability to lead multi-quarter technical initiatives across teams and influence architecture beyond your immediate team.
  • Strong written and verbal communication skills, including writing RFCs and design docs that are read and acted on.
  • Hands-on experience with the Ory ecosystem (Hydra, Kratos, Keto) in production or via API integration, preferred.
  • Experience with CockroachDB or other distributed SQL databases, preferred.
  • Familiarity with IAM-related compliance requirements such as SOC 2, ISO 27001, GDPR data minimization, and audit logging, preferred.
  • Contributions to open-source security or identity projects, preferred.
  • Experience building or integrating with SCIM, SAML, or enterprise SSO such as LDAP or Active Directory, preferred.
  • Background in platform or infrastructure engineering, preferred.
  • Hands-on experience with modern AI tools such as Claude, Copilot, or Cursor for code generation and review, preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Hasbro

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

United States Full-time Lead Security Engineer
$173k-$259k
Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
16 hours, 16 minutes ago
Dragos

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

United States Full-time Senior Embedded Systems Engineer Security Engineer
$165k-$165k
Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
16 hours, 16 minutes ago
Jolera

Elastic Engineer

Jolera 251-1K Internet Software & Services

Jolera is seeking an Elastic Engineer to design and operate scalable Elasticsearch-based environments for cybersecurity analytics, threat hunting, and detection workflows.

India Full-time Senior DevOps Engineer Security Engineer
Cybersecurity Elasticsearch Encryption Java Kibana Linux Logstash Machine Learning Python Ruby
16 hours, 46 minutes ago
Phoeniqs Futuretech Solutions

Odoo Technical Lead

Phoeniqs Futuretech Solutions 1-10 Internet Software & Services

Odoo Technical Lead at the company’s Office IT team, responsible for leading Odoo-driven business applications, integrations, automation, and digital transformation across the organization.

Switzerland Lead Software Engineer Technical Lead
ERP PostgreSQL Python REST API
16 hours, 46 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers