4 months ago
Serbia (city not specified)Staff+
Responsibilities
- Own the IAM platform’s architecture and technical strategy for authentication, authorization, and session management at scale.
- Design and evolve OAuth 2.0/OIDC flows, token lifecycles, and security primitives.
- Drive cross-team decisions involving protocol design, data modeling, platform reliability, and technical standards.
- Identify systemic risks and performance bottlenecks and lead initiatives to address them proactively.
- Review critical code and designs and provide leverage through documentation, tooling, mentorship, RFCs, and design documents.
- Align with product, security, and infrastructure stakeholders on roadmaps and technical plans.
- Serve as the escalation point for complex production IAM issues.
Requirements
- Deep understanding of OAuth 2.0, OIDC, authorization code with PKCE, client credentials, device flow, token introspection, and refresh strategies.
- Strong knowledge of cookie security, CSRF, XSS, token storage, TLS, and secure session management.
- Experience designing or operating production-grade IAM or authentication systems.
- Strong Go engineering skills, including idiomatic code, concurrency patterns, and performance profiling.
- Experience with distributed systems and trade-offs involving consistency, availability, and failure modes.
- Experience with PostgreSQL schema design, query optimization, and migrations at scale.
- Experience deploying, operating, and debugging services in Kubernetes.
- Experience with Kafka or NATS and event-driven delivery patterns.
- Proven ability to lead multi-quarter technical initiatives and influence architecture and standards across teams.
- Strong written and verbal communication skills, including the ability to produce effective RFCs and design documents.
- Preferred experience with Ory Hydra, Ory Kratos, Ory Keto, CockroachDB, distributed SQL databases, IAM compliance, SCIM, SAML, LDAP, Active Directory, enterprise SSO, platform engineering, or open-source security projects.
- Preferred hands-on experience with Claude, Copilot, Cursor, or similar AI development tools.
Benefits
- Unlimited Flexible Time Off.
- Personalized career roadmap.
- Training and educational opportunities for professional development.
- Comprehensive physical, mental, and emotional well-being benefits program.
- Background checks may be conducted after the final interview stage where permitted by law, in compliance with local regulations.
Tech Stack
About Xsolla
Xsolla builds commerce and monetization infrastructure for video games, offering payment processing, merchant-of-record services, storefronts, subscriptions, and anti-fraud tools for developers and publishers. The privately held company, founded in 2005 and headquartered in Sherman Oaks, California, supports direct-to-consumer sales and global tax/compliance across many regions and payment methods. Its platform targets studios from indie to AAA and powers distribution, marketing, and in-game purchases.