{"id":1748898,"url":"https://alion.io/job/xsolla-middlesenior-backend-engineer-2","title":"Middle/Senior Backend Engineer","company":{"id":2375,"name":"Xsolla","domain":"xsolla.com","url":"https://alion.io/company/xsolla","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":76,"open_postings":168,"ghost_share":0.321,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":71,"computed_at":"2026-10-04T05:45:00Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["RU"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":29000,"max_usd":53000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":90},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache Kafka","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"CockroachDB","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"Docker","optional":false},{"name":"GDPR","optional":false},{"name":"Git","optional":false},{"name":"Go","optional":false},{"name":"Hydra","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"MySQL","optional":false},{"name":"NATS","optional":false},{"name":"Nginx","optional":false},{"name":"PostgreSQL","optional":false},{"name":"RabbitMQ","optional":false},{"name":"Redis","optional":false},{"name":"Rest API","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"Swagger","optional":false}],"status":"live","first_seen_at":"2026-09-29T13:33:16Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-04T23:56:10Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":4},"description":"ABOUT US\nXsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.\nFor more information, visit xsolla.com.\nABOUT YOU\nWe are looking for a Middle/Senior Backend Engineer who is passionate about building secure, high-load identity systems to join our Xsolla ID team. The best candidate will be someone who thrives in a fast-paced, highly collaborative, and exceptionally dynamic setting and is excited to develop a next-generation IAM (Identity and Access Management) platform that serves as the foundation for all Xsolla B2C products.\nStrong backend development skills in Go are essential, along with experience in building scalable distributed systems and working with authentication/authorization protocols. The ability to design and optimize high-availability services handling millions of users will be key to your success in this role.\nIf you're passionate about creating reliable, secure identity solutions and love working on strategic platforms that directly impact user experience across gaming ecosystem, we would love to hear from you!\nAbout the project\nXsolla ID is a strategic core service - the centralized identity provider for the entire Xsolla ecosystem. It is not just a login form; it's a comprehensive IAM platform enabling authentication and authorization across all B2C products, including Xsolla Wallet, Xsolla App, Web Shops, and partner integrations.\nTech Stack:\nLanguage: Go (idiomatic code, concurrency patterns, performance profiling)\n\nDatabases: PostgreSQL (schema design, query optimization, migrations at scale), MySQL, Redis\n\nDistributed SQL: CockroachDB (multi-region deployments, clock skew handling, survivability trade-offs) for geo-distributed data residency\n\nMessage Streaming: NATS, Kafka (event-driven patterns, consumer groups, at-least-once delivery), RabbitMQ\n\nInfrastructure: Docker, Kubernetes, Nginx\n\nIdentity Stack: Ory ecosystem (Hydra for OAuth2/OIDC, Kratos for identity management) with a custom Auth API orchestrator and plugin architecture\n\nProtocols: OAuth 2.0 / OIDC (authorization code + PKCE, client credentials, device flow, token introspection, refresh strategies), WebAuthn\n\nWeb Security: cookie security, CSRF, XSS protection, secure token storage, TLS, secure session management\n\nArchitecture: Microservices, High Availability design\n\nKey Technical Challenges:\nBuilding Web2 & Web3 authentication flows (OTP, passkeys, biometrics, wallet-based login)\n\nImplementing custom auth methods without forking Ory\n\nSSO without third-party cookies\n\nZero-downtime migration from legacy Xsolla Login with bidirectional identity sync\n\nGeo-distributed data residency via CockroachDB\n\nHigh availability and scaling for millions of concurrent users\n\nSDK development and integration with multiple Xsolla products\n\nResponsibilities\nDevelop and maintain backend services for the Xsolla ID platform using Go\n\nDesign and implement OAuth 2.0 / OIDC flows (authorization code + PKCE, client credentials, device flow), token introspection, and refresh strategies\n\nWork with the Ory ecosystem (Hydra, Kratos) and extend the custom Auth API orchestrator and plugin architecture\n\nApply web security fundamentals: cookie security, CSRF/XSS protection, secure token storage, TLS, secure session management\n\nOptimize database queries and ensure high performance under heavy loads (PostgreSQL, MySQL, Redis, CockroachDB)\n\nBuild and maintain microservices architecture with focus on reliability and scalability\n\nContribute to zero-downtime migration from legacy Xsolla Login with bidirectional identity sync\n\nWrite clean, well-tested code with comprehensive unit and integration test coverage\n\nCollaborate with frontend engineers on SDK and widget integration\n\nParticipate in code reviews and contribute to technical documentation\n\nSupport production systems and troubleshoot issues across the authentication stack\n\nQUALIFICATIONS\nRequired:\n2+ years of commercial experience with Go\n\nStrong understanding of PostgreSQL and Redis (query optimization, indexing strategies)\n\nWorking knowledge of OAuth 2.0 / OIDC auth flows (authorization code, client credentials) or strong motivation to learn\n\nUnderstanding of web security fundamentals: CSRF, XSS, cookie security, TLS\n\nExperience with Docker and docker-compose\n\nProficiency with Git and collaborative development workflows\n\nUnderstanding of Nginx and web server configuration\n\nSolid experience writing unit tests and maintaining high code quality\n\nGood English reading skills (technical documentation)\n\nPreferred:\nUnderstanding of microservices architecture and distributed systems trade-offs (consistency, availability, failure modes)\n\nExperience with REST API design and documentation (Swagger/OpenAPI)\n\nHands-on experience with CI/CD pipelines\n\nFamiliarity with the Ory ecosystem (Hydra, Kratos, Keto) or similar identity management frameworks\n\nKnowledge of PKCE, client credentials, device flow, token introspection, and refresh-token strategies\n\nExperience with CockroachDB or other distributed SQL databases (multi-region deployments, clock skew handling)\n\nExperience with NATS, Kafka, or RabbitMQ for event-driven / message-streaming patterns\n\nFamiliarity with Jira for project management\n\nUnderstanding of Kubernetes and container orchestration\n\nFamiliarity with compliance requirements relevant to IAM: SOC 2, ISO 27001, GDPR data minimization, audit logging\n\nPractical, up-to-date experience with modern AI tools (e.g. Claude, Copilot, Cursor) for code generation, review, and accelerating day-to-day engineering work","description_format":"text","description_chars":6196,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Russia","iso":"RU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce"],"lifecycle":[{"event":"open","at":"2026-10-03T07:43:48Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":71,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-10-04T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/xsolla-middlesenior-backend-engineer-2","json_url":"https://alion.io/job/xsolla-middlesenior-backend-engineer-2.json","meta":{"generated_at":"2026-10-05T00:16:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":251,"day_limit":5000,"remaining_today":4749,"minute_limit":60,"resets_at":"2026-10-06T00:00:00Z"}}}