Staff Software Engineer — Identity & Access Management
Xsolla is a global video game commerce company providing tools and services to launch, monetize, and scale games. Its offerings include payments, web shops, publishing, distribution, LiveOps, anti-fraud, subscriptions, SDKs, and creator solutions for developers, publishers, payment providers, creators, and other gaming businesses.
Maintainer signals as of 8/23/2026
Projects
About Xsolla (USA), Inc.
Xsolla operates as a global merchant of record and video game commerce platform serving developers, publishers, resellers, payment providers, creators, and retailers. It provides payment processing across more than 200 countries and regions, 1,000+ payment methods, and 130+ currencies, alongside tax management, compliance, fraud prevention, refunds, dispute management, and end-user support. Its product portfolio includes Web Shop, Publishing Suite, Payments, Xsolla Pay, Mobile Buy Button, SDKs, Subscriptions, game distribution, Partner Network, Offerwall, LiveOps, Anti-Fraud, Login, Site Builder, cloud gaming, and related gaming commerce tools.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the technical strategy and architecture for an identity and access management platform, including authentication, authorization, and session management. You will design and evolve OAuth 2.0 and OIDC flows, guide cross-team technical decisions, identify risks and bottlenecks, and lead production escalations. You will define engineering standards, review critical code and designs, produce documentation and tooling, mentor others, and translate stakeholder needs into technical plans.
Requirements
- Deep understanding of OAuth 2.0, OIDC, and related authentication flows.
- Knowledge of cookie security, CSRF, XSS, token storage, TLS, and secure session management.
- Experience designing or operating production-grade IAM or authentication systems.
- Strong Go engineering skills, including concurrency patterns and performance profiling.
- Experience with distributed systems and their trade-offs.
- PostgreSQL schema design, query optimization, and migrations at scale.
- Experience deploying, operating, and debugging services in Kubernetes.
- Experience with Kafka or NATS and event-driven patterns.
- Knowledge of Git and modern CI/CD practices.
- Ability to lead multi-quarter technical initiatives across teams.
- Experience influencing architecture and engineering standards.
- Written and verbal communication skills, including RFCs and design documents.
Responsibilities
- Own the IAM technical strategy and architecture for authentication, authorization, and session management.
- Design and evolve OAuth 2.0 and OIDC flows, token lifecycles, and security primitives.
- Drive technical decisions on protocol design, data modeling, and platform reliability.
- Identify systemic risks and performance bottlenecks and lead mitigation initiatives.
- Define engineering standards and review critical code and designs.
- Create leverage through documentation, tooling, and mentorship.
- Collaborate with product, security, and infrastructure stakeholders on roadmaps and technical plans.
- Serve as an escalation point for complex IAM production issues.
