Staff Software Engineer (Identity & Access Control)

About the role

Xsolla is looking for a Staff Software Engineer to own and evolve the core authentication and authorization layer of its global gaming commerce platform. You will design, build, and scale a resilient, multi‑tenant identity fabric that serves millions of users worldwide.

Key responsibilities

• Architect and implement high‑performance IAM services using Go.
• Manage identity federation, token lifecycles, and fine‑grained access control models.
• Deploy and operate services in Kubernetes clusters on AWS or GCP.
• Ensure security best practices, encryption, and compliance across the platform.
• Collaborate with product and security teams to deliver a seamless developer experience.

Required profile

• 10+ years of backend or systems engineering experience, with at least 5 years focused on Identity & Access Management.
• Deep understanding of OAuth 2.0, OpenID Connect, JWT, and SCIM.
• Security‑first mindset and proven ability to build scalable, multi‑tenant architectures.

Required skills

• Go (Golang)
• Kubernetes
• AWS or GCP
• OAuth 2.0, OpenID Connect, JWT, SCIM
• Ory Kratos / Ory Keto, Keycloak, Auth0, ForgeRock
• Open Policy Agent (OPA), ReBAC, ABAC