Xsolla is seeking a Principal Engineer to lead the evolution of their authentication and authorization stack, enabling developers and players to connect safely and effortlessly across the Xsolla ecosystem.
Requirements
- Expert-level skills in Golang, with experience building and scaling distributed, event-driven microservices.
- Proven track record with identity federation, token management, and access control systems.
- In-depth understanding of authentication and authorization standards (OAuth 2.0, OIDC, SAML, JWT, SCIM).
- Solid grasp of security principles, encryption, key management, and secrets management systems (e.g., HashiCorp Vault, AWS KMS).
- Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure.
- Strong architectural vision with the ability to influence cross-team design and technology direction.
- Experience building or contributing to identity systems for gaming or SaaS ecosystems.
Responsibilities
- Architect and lead the design of Xsolla’s next-generation identity platform, supporting authentication, authorization, single sign-on (SSO), and account federation across internal and external services.
- Develop high-performance Golang microservices that manage user identity, access tokens, and permission enforcement at global scale.
- Collaborate closely with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance across services.
- Integrate modern IAM standards and protocols (OAuth2, OIDC, SAML, SCIM) to enhance developer experience and partner integrations.
- Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
- Partner with product teams to ensure that identity-related features — such as player login, entitlement management, and account linking — are scalable, compliant, and user-friendly.
- Define and enforce API and data security standards, supporting compliance initiatives such as GDPR, SOC 2, and ISO 27001.
Other
- 10+ years in backend or systems engineering, including 5+ years designing and implementing IAM or authentication services.
- Excellent communication and collaboration skills across distributed teams.
- We consider qualified applicants with criminal histories in accordance with the Fair Chance Act.
- Criminal history check
- Employment verification
