Staff Software Engineer — Identity & Access Management

Xsolla
Canada
Workplace: RemoteFull timeFunction: Software EngineeringSkills: ["Cross-team leadership","Written communication","Verbal communication","Proactive risk management","Mentorship"]

Own the IAM platform’s technical strategy and architecture, driving authentication, authorization, and session management at high scale. Evolve OAuth 2.0/OIDC flows, token lifecycle, and security primitives while designing for both product and compliance needs. Lead cross-team technical decisions, set engineering standards through RFCs and design docs, and serve as the escalation point for complex production IAM issues.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Xsolla
Xsolla
2 months ago

Staff Software Engineer — Identity & Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Own the IAM platform’s technical strategy and architecture, driving authentication, authorization, and session management at high scale. Evolve OAuth 2.0/OIDC flows, token lifecycle, and security primitives while designing for both product and compliance needs. Lead cross-team technical decisions, set engineering standards through RFCs and design docs, and serve as the escalation point for complex production IAM issues.
Location: Canada
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Own IAM architecture and strategy across authentication, authorization, and session management at scale.
  • •Design and evolve OAuth 2.0/OIDC flows, token lifecycle, and security primitives to meet product and compliance requirements.
  • •Drive cross-team technical decisions on protocol design, data modeling, and platform reliability, building buy-in across engineering and security.
  • •Identify systemic risks and performance bottlenecks, leading initiatives to resolve issues before incidents occur.
  • •Define engineering standards, review critical designs and code, and create leverage through documentation, tooling, and mentorship while handling production escalations.

Key Requirements

  • •Deep understanding of OAuth 2.0/OIDC and related auth flows, including authorization code + PKCE, client credentials, device flow, token introspection, and refresh strategies.
  • •Solid grasp of web security fundamentals including cookie security, CSRF, XSS, token storage, TLS, and secure session management.
  • •Experience designing or operating production-grade IAM or auth systems.
  • •Strong Go (Golang) engineering skills including concurrency patterns, performance profiling, and idiomatic code.
  • •Experience with distributed systems trade-offs and/or production backend engineering in a large-scale environment.
Experience:Video games
Skills:Cross-team leadershipWritten communicationVerbal communicationProactive risk managementMentorship
Tech Stack:OAuth 2.0OIDCPKCEGoGolangPostgreSQLKubernetesKafkaNATSGitCI/CDTLSOAuth

Company Brief

Xsolla
Provides payment, billing, distribution and commerce solutions for video game developers and publishers, enabling in-game purchases, store infrastructure, fraud protection, and global payment processing to monetize games across platforms and regions.
Industry: Payments
Company Size: Large (251 to 1,000 employees)
Growth: Established Company
Headquarters: Sherman Oaks, Los Angeles, United States
Founded: 2005
WebsiteLinkedIn