Principal Engineer – Identity Management, IAM, Golang Backend

Posted 5 days ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Principal Engineer designing next-generation identity management platform for Xsolla. Leading architectural decisions and implementing IAM standards in collaborative tech teams.

Responsibilities

  • Architect and lead the design of Xsolla’s next-generation identity platform, supporting authentication, authorization, single sign-on (SSO), and account federation across internal and external services.
  • Develop high-performance Golang microservices that manage user identity, access tokens, and permission enforcement at global scale.
  • Collaborate closely with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance across services.
  • Integrate modern IAM standards and protocols (OAuth2, OIDC, SAML, SCIM) to enhance developer experience and partner integrations.
  • Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
  • Partner with product teams to ensure that identity-related features — such as player login, entitlement management, and account linking — are scalable, compliant, and user-friendly.
  • Define and enforce API and data security standards, supporting compliance initiatives such as GDPR, SOC 2, and ISO 27001.
  • Evaluate and integrate third-party IAM frameworks or open-source solutions (e.g., Keycloak, Auth0, ForgeRock) as part of Xsolla’s hybrid identity strategy.

Requirements

  • 10+ years in backend or systems engineering, including 5+ years designing and implementing IAM or authentication services.
  • Expert-level skills in Golang, with experience building and scaling distributed, event-driven microservices.
  • Proven track record with identity federation, token management, and access control systems.
  • In-depth understanding of authentication and authorization standards (OAuth 2.0, OIDC, SAML, JWT, SCIM).
  • Solid grasp of security principles, encryption, key management, and secrets management systems (e.g., HashiCorp Vault, AWS KMS).
  • Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure.
  • Strong architectural vision with the ability to influence cross-team design and technology direction.
  • Excellent communication and collaboration skills across distributed teams.

Job type

Full Time

Experience level

Lead

Salary

CA$130,000 - CA$180,000 per year

Degree requirement

No Education Requirement

Tech skills

AWSAzureGoogle Cloud PlatformKubernetesMicroservicesVaultGo

Location requirements

HybridMontrealCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.