Xsolla

Principal Engineer – Identity Management (IAM & Golang Backend)

Apply Now

Job Description

ABOUT YOU

Xsolla is seeking a Principal Engineer with deep expertise in Identity and Access Management (IAM) and Golang backend development to lead the evolution of our authentication and authorization stack — enabling developers and players to connect safely and effortlessly across the Xsolla ecosystem.


RESPONSIBILITIES
  •  Architect and lead the design of Xsolla’s next-generation identity platform, supporting authentication, authorization, single sign-on (SSO), and account federation across internal and external services.
  •  Develop high-performance Golang microservices that manage user identity, access tokens, and permission enforcement at global scale.
  •  Collaborate closely with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance across services.
  •  Integrate modern IAM standards and protocols (OAuth2, OIDC, SAML, SCIM) to enhance developer experience and partner integrations.
  •  Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
  •  Partner with product teams to ensure that identity-related features — such as player login, entitlement management, and account linking — are scalable, compliant, and user-friendly.
  •  Define and enforce API and data security standards, supporting compliance initiatives such as GDPR, SOC 2, and ISO 27001.
  •  Evaluate and integrate third-party IAM frameworks or open-source solutions (e.g., Keycloak, Auth0, ForgeRock) as part of Xsolla’s hybrid identity strategy.

  • QUALIFICATIONS & SKILLS
  •  10+ years in backend or systems engineering, including 5+ years designing and implementing IAM or authentication services.
  •  Expert-level skills in Golang, with experience building and scaling distributed, event-driven microservices.
  •  Proven track record with identity federation, token management, and access control systems.
  •  In-depth understanding of authentication and authorization standards (OAuth 2.0, OIDC, SAML, JWT, SCIM).
  •  Solid grasp of security principles, encryption, key management, and secrets management systems (e.g., HashiCorp Vault, AWS KMS).
  •  Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure.
  •  Strong architectural vision with the ability to influence cross-team design and technology direction.
  •  Excellent communication and collaboration skills across distributed teams.

  • NICE TO HAVE
  •  Experience building or contributing to identity systems for gaming or SaaS ecosystems.
  •  Familiarity with multi-tenant architectures, RBAC/ABAC models, and policy-as-code (OPA, AuthZ frameworks).
  •  Background in security engineering, DevSecOps, or compliance automation.
  •  Contributions to open-source Golang or IAM projects.