Xsolla

3 weeks ago

Staff Software Engineer — Identity & Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Own the technical strategy and architecture of the IAM platform, guiding authentication, authorization, and session management at scale. Design and evolve OAuth 2.0 / OIDC flows and token lifecycle, drive cross-team decisions across engineering and security, and proactively de-risk reliability and performance issues. Set engineering standards, write RFCs/design docs, and serve as the go-to escalation point for complex production IAM problems.

Location: Serbia

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Own the IAM platform architecture and technical strategy across authentication, authorization, and session management at scale.
•Design and evolve OAuth 2.0 / OIDC flows, token lifecycle, and security primitives to meet product and compliance requirements.
•Drive cross-team technical decisions on protocol design, data modeling, and platform reliability with engineering and security stakeholders.
•Identify systemic risks and performance bottlenecks and lead initiatives to prevent incidents.
•Define engineering standards, review critical designs/code, and provide leverage through documentation, tooling, and mentorship.

Key Requirements

•Deep understanding of OAuth 2.0 and OIDC, including authorization code + PKCE, client credentials, device flow, token introspection, and refresh strategies.
•Strong grasp of web security fundamentals including cookie security, CSRF, XSS, token storage, TLS, and secure session management.
•Experience designing or operating production-grade IAM or authentication systems.
•Strong Go (Golang) engineering skills, including idiomatic code, concurrency patterns, and performance profiling.
•Experience with distributed systems and trade-offs across consistency, availability, and failure modes.

Experience:Identity & access managementIAMSecurityDistributed systemsBackend infrastructure

Skills:LeadershipArchitectural influenceWritten communicationCross-team collaborationDe-risking under pressure

Tech Stack:GoGolangOAuth 2.0OIDCPKCEPostgreSQLKubernetesKafkaNATSGitCI/CDTLSOAuthToken introspectionCSRFXSSCookie securityOAuth flowsSession managementOry

Company Brief

Xsolla

Provides payment, billing, distribution and commerce solutions for video game developers and publishers, enabling in-game purchases, store infrastructure, fraud protection, and global payment processing to monetize games across platforms and regions.

Industry: Payments

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Sherman Oaks, Los Angeles, United States

Founded: 2005

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Xsolla

3 weeks ago

Staff Software Engineer — Identity & Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: Serbia

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Own the IAM platform architecture and technical strategy across authentication, authorization, and session management at scale.
•Design and evolve OAuth 2.0 / OIDC flows, token lifecycle, and security primitives to meet product and compliance requirements.
•Drive cross-team technical decisions on protocol design, data modeling, and platform reliability with engineering and security stakeholders.
•Identify systemic risks and performance bottlenecks and lead initiatives to prevent incidents.
•Define engineering standards, review critical designs/code, and provide leverage through documentation, tooling, and mentorship.

Key Requirements

•Deep understanding of OAuth 2.0 and OIDC, including authorization code + PKCE, client credentials, device flow, token introspection, and refresh strategies.
•Strong grasp of web security fundamentals including cookie security, CSRF, XSS, token storage, TLS, and secure session management.
•Experience designing or operating production-grade IAM or authentication systems.
•Strong Go (Golang) engineering skills, including idiomatic code, concurrency patterns, and performance profiling.
•Experience with distributed systems and trade-offs across consistency, availability, and failure modes.

Experience:Identity & access managementIAMSecurityDistributed systemsBackend infrastructure

Skills:LeadershipArchitectural influenceWritten communicationCross-team collaborationDe-risking under pressure

Tech Stack:GoGolangOAuth 2.0OIDCPKCEPostgreSQLKubernetesKafkaNATSGitCI/CDTLSOAuthToken introspectionCSRFXSSCookie securityOAuth flowsSession managementOry

Company Brief

Xsolla

Industry: Payments

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Sherman Oaks, Los Angeles, United States

Founded: 2005

Website LinkedIn