4 months ago
Canada (city not specified)Staff+
Responsibilities
- Own the IAM platform’s technical strategy and architecture across authentication, authorization, and session management.
- Design and evolve OAuth 2.0 and OIDC flows, token lifecycles, and security primitives.
- Drive cross-team decisions involving protocol design, data modeling, platform reliability, and technical roadmaps.
- Identify systemic risks and performance bottlenecks and lead initiatives to resolve them proactively.
- Define engineering standards, review critical code and designs, and provide documentation, tooling, and mentorship.
- Collaborate with product, security, and infrastructure teams to translate business needs into technical plans.
- Serve as the escalation point for complex production IAM issues.
- Lead multi-quarter technical initiatives and influence architecture beyond the immediate team.
Requirements
- Deep understanding of OAuth 2.0, OIDC, authorization code with PKCE, client credentials, device flow, token introspection, and refresh strategies.
- Strong knowledge of cookie security, CSRF, XSS, token storage, TLS, and secure session management.
- Experience designing or operating production-grade IAM or authentication systems.
- Experience working in the video game industry or building platforms for game developers, publishers, or players.
- Strong Go engineering skills, including idiomatic code, concurrency patterns, and performance profiling.
- Experience with distributed systems and trade-offs involving consistency, availability, and failure modes.
- Experience with PostgreSQL schema design, query optimization, and migrations at scale.
- Experience deploying, operating, and debugging services in Kubernetes.
- Experience with Kafka or NATS and event-driven patterns, consumer groups, and at-least-once delivery.
- Experience with Git and modern CI/CD practices.
- Proven ability to lead cross-team technical initiatives and influence architecture and engineering standards.
- Preferred experience with the Ory ecosystem, including Hydra, Kratos, or Keto.
- Preferred experience with CockroachDB or other distributed SQL databases and multi-region deployments.
- Familiarity with SOC 2, ISO 27001, GDPR data minimization, and audit logging requirements.
- Preferred contributions to open-source security or identity projects.
- Preferred experience with SCIM, SAML, enterprise SSO, LDAP, or Active Directory.
- Platform or infrastructure engineering experience is a plus.
- Current experience using AI tools such as Claude, Copilot, or Cursor for engineering work is a plus.
Benefits
- Medical, dental, and vision coverage.
- Paid time off.
- Personalized career roadmap.
- Training and educational opportunities for professional development.
- Support for employees’ and families’ physical, mental, and emotional well-being.
Tech Stack
About Xsolla
Xsolla builds commerce and monetization infrastructure for video games, offering payment processing, merchant-of-record services, storefronts, subscriptions, and anti-fraud tools for developers and publishers. The privately held company, founded in 2005 and headquartered in Sherman Oaks, California, supports direct-to-consumer sales and global tax/compliance across many regions and payment methods. Its platform targets studios from indie to AAA and powers distribution, marketing, and in-game purchases.