Xsolla - Principal Engineer – Identity Management (IAM & Golang Backend)
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• 10+ years in backend or systems engineering, including 5+ years designing and implementing IAM or authentication services. • Expert-level skills in Golang, with experience building and scaling distributed, event-driven microservices. • Proven track record with identity federation, token management, and access control systems. • In-depth understanding of authentication and authorization standards (OAuth 2.0, OIDC, SAML, JWT, SCIM). • Solid grasp of security principles, encryption, key management, and secrets management systems (e.g., HashiCorp Vault, AWS KMS). • Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure. • Strong architectural vision with the ability to influence cross-team design and technology direction. • Excellent communication and collaboration skills across distributed teams. • Experience building or contributing to identity systems for gaming or SaaS ecosystems. • Familiarity with multi-tenant architectures, RBAC/ABAC models, and policy-as-code (OPA, AuthZ frameworks). • Background in security engineering, DevSecOps, or compliance automation. • Contributions to open-source Golang or IAM projects. • $180,000 - $250,000 a year • The listed range is specific to Los Angeles, CA, and varies based on factors such as location and experience. • Equal Employment Opportunity Statement:
Responsibilities
• Architect and lead the design of Xsolla’s next-generation identity platform, supporting authentication, authorization, single sign-on (SSO), and account federation across internal and external services. • Develop high-performance Golang microservices that manage user identity, access tokens, and permission enforcement at global scale. • Collaborate closely with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance across services. • Integrate modern IAM standards and protocols (OAuth2, OIDC, SAML, SCIM) to enhance developer experience and partner integrations. • Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns. • Partner with product teams to ensure that identity-related features — such as player login, entitlement management, and account linking — are scalable, compliant, and user-friendly. • Define and enforce API and data security standards, supporting compliance initiatives such as GDPR, SOC 2, and ISO 27001. • Evaluate and integrate third-party IAM frameworks or open-source solutions (e.g., Keycloak, Auth0, ForgeRock) as part of Xsolla’s hybrid identity strategy. • Accessing confidential company data • Ensuring compliance with regulatory requirements • Handling sensitive financial information/managing budgets/accessing funds • Rights Under the Fair Chance Act: • Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact [email protected].
Benefits
• We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes 100% company-paid medical, dental, and vision plans, unlimited Flexible Time Off, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play. • By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with this Xsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to [email protected].
No credit card. Takes 10 seconds.