Staff Software Engineer (Identity & Access Control)

Xsolla
Serbia
Workplace: RemoteFull timeFunction: Software EngineeringExperience: 10+ yearsSkills: ["Go","OAuth 2.0","OIDC","JWT","SCIM","Kubernetes","AWS","GCP","Open Policy Agent","OPA","ReBAC","ABAC","OAuth"]

Lead the authentication and authorization infrastructure for a global gaming SaaS ecosystem. Own identity federation, token lifecycles, and fine-grained access control models in a multi-tenant, security-first environment built with Go and Kubernetes, across AWS/GCP. Collaborate on scalable, secure IAM systems with experience in OAuth2/OIDC/JWT and modern security practices.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Xsolla
Xsolla
4 months ago

Staff Software Engineer (Identity & Access Control)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Lead the authentication and authorization infrastructure for a global gaming SaaS ecosystem. Own identity federation, token lifecycles, and fine-grained access control models in a multi-tenant, security-first environment built with Go and Kubernetes, across AWS/GCP. Collaborate on scalable, secure IAM systems with experience in OAuth2/OIDC/JWT and modern security practices.
Location: Serbia
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering

Key Responsibilities

  • •Architect and own the IAM infrastructure for authentication and authorization across a multi-tenant, global SaaS platform
  • •Design and implement secure, scalable, and high-availability identity services including federation and token lifecycle management
  • •Define and implement fine-grained access control models (e.g., ABAC/ RBAC) and secure coding practices across services
  • •Collaborate with security, platform, and product teams to drive security-first design and DevOps practices
  • •Contribute to Open Source Golang security libraries and stay ahead of IAM ecosystem trends

Pay and Benefits

Perks:Paid LeaveLearning Budget

Key Requirements

  • •10+ years in backend or systems engineering, with at least 5 years dedicated to Identity & Access Management (IAM)
  • •Expert-level proficiency in Go, with a track record of building high-performance, concurrent, and scalable distributed systems
  • •Proven experience deploying and managing services within Kubernetes environments (AWS or GCP)
  • •Deep architectural understanding of OAuth 2.0, OIDC, JWT, and SCIM
  • •Hands-on experience with identity federation, token management, and complex access control flows
Experience:10+ yearsGamingSaaS
Skills:GoOAuth 2.0OIDCJWTSCIMKubernetesAWSGCPOpen Policy AgentOPAReBACABACOAuth
Languages:English
Tech Stack:GoKubernetesAWSGCPOAuth 2.0OIDCJWTSCIMOPAOpen Policy AgentOryKeycloakForgeRock

Company Brief

Xsolla
Provides payment, billing, distribution and commerce solutions for video game developers and publishers, enabling in-game purchases, store infrastructure, fraud protection, and global payment processing to monetize games across platforms and regions.
Industry: Payments
Company Size: Large (251 to 1,000 employees)
Growth: Established Company
Headquarters: Sherman Oaks, Los Angeles, United States
Founded: 2005
WebsiteLinkedIn