Hybrid Principal Engineer – Identity Management, IAM, Golang Backend

at Xsolla

• Job title: Principal Engineer – Identity Management, IAM, Golang Backend
• Job type: Full Time
• Experience level: Lead
• Salary: CA$130,000 - CA$180,000 per year
• Degree requirement: No Education Requirement
• Tech skills: AWS, Azure, Google Cloud Platform, Kubernetes, Microservices, Vault, Go
• Location requirements: Hybrid, Montreal, Canada

About the role

• Principal Engineer designing next-generation identity management platform for Xsolla. Leading architectural decisions and implementing IAM standards in collaborative tech teams.

Responsibilities

• Architect and lead the design of Xsolla’s next-generation identity platform, supporting authentication, authorization, single sign-on (SSO), and account federation across internal and external services.
• Develop high-performance Golang microservices that manage user identity, access tokens, and permission enforcement at global scale.
• Collaborate closely with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance across services.
• Integrate modern IAM standards and protocols (OAuth2, OIDC, SAML, SCIM) to enhance developer experience and partner integrations.
• Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
• Partner with product teams to ensure that identity-related features — such as player login, entitlement management, and account linking — are scalable, compliant, and user-friendly.
• Define and enforce API and data security standards, supporting compliance initiatives such as GDPR, SOC 2, and ISO 27001.
• Evaluate and integrate third-party IAM frameworks or open-source solutions (e.g., Keycloak, Auth0, ForgeRock) as part of Xsolla’s hybrid identity strategy.

Requirements

• 10+ years in backend or systems engineering, including 5+ years designing and implementing IAM or authentication services.
• Expert-level skills in Golang, with experience building and scaling distributed, event-driven microservices.
• Proven track record with identity federation, token management, and access control systems.
• In-depth understanding of authentication and authorization standards (OAuth 2.0, OIDC, SAML, JWT, SCIM).
• Solid grasp of security principles, encryption, key management, and secrets management systems (e.g., HashiCorp Vault, AWS KMS).
• Experience building high-availability systems in Kubernetes-based environments using AWS, GCP, or Azure.
• Strong architectural vision with the ability to influence cross-team design and technology direction.
• Excellent communication and collaboration skills across distributed teams.