Job description

ABOUT YOU Xsolla is seeking a Principal Engineer with deep expertise in Identity and Golang backend development to lead the evolution of our authentication and authorization stack — enabling developers and players to connect safely and effortlessly across the Xsolla ecosystem . ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com . Responsibilities: Architect and lead the design of Xsolla’s next-generation identity platform, supporting authentication, authorization, single sign-on (SSO), and account federation across internal and external services. Develop high-performance Golang microservices that manage user identity, access tokens, and permission enforcement at global scale. Collaborate closely with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance across services. Integrate modern IAM standards and protocols (OAuth2, OIDC, SCIM) to enhance developer experience and partner integrations. Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns. Partner with product teams to ensure that identity-related features — such as player login, entitlement management, and account linking — are scalable, compliant, and user-friendly. Define and enforce API and data security standards, supporting compliance initiatives. Evaluate and integrate third-party identity frameworks or open-source solutions (e.g., Keycloak, Auth0, Ory, ForgeRock) as part of Xsolla’s hybrid identity strategy. Qualifications & Skills: 10+ years in backend or systems engineering, including 5+ years designing and implementing authentication and authorization services. Expert-level skills in Golang, with experience building and scaling distributed, event-driven microservices. Proven track record with identity federation, token management, and access control systems. In-depth understanding of authentication and authorization standards (OAuth 2.0, OIDC, JWT, SCIM). Solid grasp of security principles, encryption, key management, and secrets management systems (e.g., HashiCorp Vault, AWS KMS). Experience building high-availability systems in Kubernetes-based environments using AWS, or GCP. Strong architectural vision with the ability to influence cross-team design and technology direction. Excellent communication and collaboration skills across distributed teams. Nice to Have: Experience building or contributing to identity systems for gaming or SaaS ecosystems. Familiarity with multi-tenant architectures, ReBAC/ABAC models, and policy-as-code (OPA, AuthZ frameworks). Background in security engineering, DevSecOps, or compliance automation. Contributions to open-source Golang. Benefits: We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes 100% company-paid medical, dental, and vision plans, unlimited Flexible Time Off, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play. Equal Employment Opportunity Statement: Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act. Criminal History Consideration: For the Principal Engineer, we will conduct a background check that may include the following: Criminal history check Employment verification Education verification Relevance to Job Responsibilities: The background check is relevant to this position because of the following role responsibilities: Accessing confidential company data Ensuring compliance with regulatory requirements Handling sensitive financial information/managing budgets/accessing funds Rights Under the Fair Chance Act: Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com .

Requirements

Must-haves

Architect and lead the design of Xsolla’s next-generation identity platform, supporting authentication, authorization, single sign-on (SSO), and account federation across internal and external services.
Develop high-performance Golang microservices that manage user identity, access tokens, and permission enforcement at global scale.
Collaborate closely with security, DevOps, and platform engineering teams to embed Zero Trust principles and standardize access governance across services.
Integrate modern IAM standards and protocols (OAuth2, OIDC, SCIM) to enhance developer experience and partner integrations.
Mentor and coach engineering teams on secure service design, identity best practices, and cross-service communication patterns.
Partner with product teams to ensure that identity-related features — such as player login, entitlement management, and account linking — are scalable, compliant, and user-friendly.
Define and enforce API and data security standards, supporting compliance initiatives.
Evaluate and integrate third-party identity frameworks or open-source solutions (e.g., Keycloak, Auth0, Ory, ForgeRock) as part of Xsolla’s hybrid identity strategy.
10+ years in backend or systems engineering, including 5+ years designing and implementing authentication and authorization services.
Expert-level skills in Golang, with experience building and scaling distributed, event-driven microservices.
Proven track record with identity federation, token management, and access control systems.
In-depth understanding of authentication and authorization standards (OAuth 2.0, OIDC, JWT, SCIM).
Solid grasp of security principles, encryption, key management, and secrets management systems (e.g., HashiCorp Vault, AWS KMS).
Experience building high-availability systems in Kubernetes-based environments using AWS, or GCP.
Strong architectural vision with the ability to influence cross-team design and technology direction.
Excellent communication and collaboration skills across distributed teams.
For the Principal Engineer, we will conduct a background check that may include the following:
Criminal history check
Employment verification
Education verification

Nice-to-haves

Experience building or contributing to identity systems for gaming or SaaS ecosystems.
Familiarity with multi-tenant architectures, ReBAC/ABAC models, and policy-as-code (OPA, AuthZ frameworks).
Background in security engineering, DevSecOps, or compliance automation.
Contributions to open-source Golang.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

golangapiawskubernetesgcp

Platform: lever
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Professional Development