Staff Software Engineer — Identity & Access Management

Xsolla
Serbia
Workplace: RemoteFull timeFunction: Software EngineeringSkills: ["Leadership","Architectural influence","Written communication","Cross-team collaboration","De-risking under pressure"]

Own the technical strategy and architecture of the IAM platform, guiding authentication, authorization, and session management at scale. Design and evolve OAuth 2.0 / OIDC flows and token lifecycle, drive cross-team decisions across engineering and security, and proactively de-risk reliability and performance issues. Set engineering standards, write RFCs/design docs, and serve as the go-to escalation point for complex production IAM problems.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Xsolla
Xsolla
2 months ago

Staff Software Engineer — Identity & Access Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Own the technical strategy and architecture of the IAM platform, guiding authentication, authorization, and session management at scale. Design and evolve OAuth 2.0 / OIDC flows and token lifecycle, drive cross-team decisions across engineering and security, and proactively de-risk reliability and performance issues. Set engineering standards, write RFCs/design docs, and serve as the go-to escalation point for complex production IAM problems.
Location: Serbia
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Own the IAM platform architecture and technical strategy across authentication, authorization, and session management at scale.
  • •Design and evolve OAuth 2.0 / OIDC flows, token lifecycle, and security primitives to meet product and compliance requirements.
  • •Drive cross-team technical decisions on protocol design, data modeling, and platform reliability with engineering and security stakeholders.
  • •Identify systemic risks and performance bottlenecks and lead initiatives to prevent incidents.
  • •Define engineering standards, review critical designs/code, and provide leverage through documentation, tooling, and mentorship.

Key Requirements

  • •Deep understanding of OAuth 2.0 and OIDC, including authorization code + PKCE, client credentials, device flow, token introspection, and refresh strategies.
  • •Strong grasp of web security fundamentals including cookie security, CSRF, XSS, token storage, TLS, and secure session management.
  • •Experience designing or operating production-grade IAM or authentication systems.
  • •Strong Go (Golang) engineering skills, including idiomatic code, concurrency patterns, and performance profiling.
  • •Experience with distributed systems and trade-offs across consistency, availability, and failure modes.
Experience:Identity & access managementIAMSecurityDistributed systemsBackend infrastructure
Skills:LeadershipArchitectural influenceWritten communicationCross-team collaborationDe-risking under pressure
Tech Stack:GoGolangOAuth 2.0OIDCPKCEPostgreSQLKubernetesKafkaNATSGitCI/CDTLSOAuthToken introspectionCSRFXSSCookie securityOAuth flowsSession managementOry

Company Brief

Xsolla
Provides payment, billing, distribution and commerce solutions for video game developers and publishers, enabling in-game purchases, store infrastructure, fraud protection, and global payment processing to monetize games across platforms and regions.
Industry: Payments
Company Size: Large (251 to 1,000 employees)
Growth: Established Company
Headquarters: Sherman Oaks, Los Angeles, United States
Founded: 2005
WebsiteLinkedIn