{"id":103417,"url":"https://alion.io/job/xsolla-staff-software-engineer-identity-access-management","title":"Staff Software Engineer — Identity & Access Management","company":{"id":2375,"name":"Xsolla","domain":"xsolla.com","url":"https://alion.io/company/xsolla","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":72,"open_postings":179,"ghost_share":0.391,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":66,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Serbia"],"countries":["RS"],"hiring_countries":["RS"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":55000,"max_usd":135000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":672},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache Kafka","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"NATS","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Active Directory","optional":true},{"name":"Claude","optional":true},{"name":"CockroachDB","optional":true},{"name":"Copilot","optional":true},{"name":"Cursor","optional":true},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kratos","optional":true},{"name":"LDAP","optional":true},{"name":"SOC 2","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-06-30T13:14:06Z","employer_posted_date":"2026-06-30","last_verified_at":"2026-10-22T12:22:20Z","board_verified":true,"closed_at":null,"days_open":114,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":113},"description":"ABOUT YOU\nWe're looking for a Staff Engineer to join our Identity & Access Management (IAM) platform team. This is an individual contributor role with outsized technical scope: you'll be the technical anchor for how Xsolla builds secure, high-scale auth infrastructure - setting direction, making hard architectural calls, and raising the bar across the org.\nYou will own the strategy behind authentication, authorization, and session management at scale, and evolve our OAuth 2.0 / OIDC flows and token lifecycle to meet both product and compliance needs. You operate with significant autonomy, but your decisions ripple across teams - so you'll spend real time building buy-in with engineering and security stakeholders, not just designing in isolation.\nYou are technically deep, calm under pressure, and comfortable being the escalation point when production IAM issues get hard. You write the RFCs and design docs that people actually read, and you create leverage for the broader engineering org through documentation, tooling, and mentorship - without needing a management title to do it.\nHOW WE WORK\nXsolla operates across multiple time zones, and the IAM platform underpins authentication and authorization for every product we ship. Strong written communication is essential - your architectural decisions and designs need to stand on their own and be actionable without you in the room.\nWe value directness, technical depth, and follow-through. If a design or production issue has real security or reliability implications, we expect you to say so clearly, defend your position with evidence, and stay engaged until it's resolved.\nABOUT US\nXsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.\nFor more information, visit xsolla.com.\nResponsibilities\nOwn IAM Architecture & Strategy - Own the technical strategy and architecture of our IAM platform, covering authentication, authorization, and session management at scale.\nDesign Auth Protocols - Design and evolve our OAuth 2.0 / OIDC flows, token lifecycle, and security primitives to meet both product and compliance requirements.\nDrive Cross-Team Technical Decisions - Drive decisions on protocol design, data modeling, and platform reliability, and build buy-in across engineering and security teams.\nDe-Risk Proactively - Identify systemic risks and performance bottlenecks; lead initiatives to resolve them before they become incidents.\nSet Engineering Standards - Define engineering standards, review critical code and designs, and create leverage for the team through documentation, tooling, and mentorship.\nAlign with Stakeholders - Collaborate with product, security, and infra teams to align on roadmap and translate business needs into well-scoped technical plans.\nOwn Production Escalations - Serve as the go-to escalation point for complex production issues in the IAM domain.\nRequirements\nIdentity & Security\nOAuth 2.0 / OIDC Depth - Deep understanding of OAuth 2.0, OIDC, and related auth flows: authorization code + PKCE, client credentials, device flow, token introspection, refresh strategies.\nWeb Security Fundamentals - Solid grasp of cookie security, CSRF, XSS, token storage, TLS, and secure session management.\nProduction IAM Experience - Experience designing or operating production-grade IAM or auth systems.\nBackend Engineering\n Go Engineering - Strong Go (Golang) engineering skills: idiomatic code, concurrency patterns, performance profiling.\n Distributed Systems - Experience with distributed systems and their trade-offs (consistency, availability, failure modes).\nData & Infrastructure\nPostgreSQL - Schema design, query optimization, migrations at scale.\nKubernetes - Deploying, operating, and debugging services in a k8s environment.\nMessage Streaming - Kafka or NATS - event-driven patterns, consumer groups, at-least-once delivery.\nGit & CI/CD - Git and modern CI/CD practices.\nLeadership\nCross-Team Initiative Leadership - Proven ability to lead multi-quarter technical initiatives across teams.\nArchitectural Influence - Track record of influencing architecture and standards beyond your immediate team.\n Written & Verbal Communication - You write RFCs and design docs that people actually read.\nNice to Have\nHands-on experience with the Ory ecosystem (Hydra, Kratos, Keto) - operating it in production or building on top of its APIs\nExperience with CockroachDB or other distributed SQL databases (multi-region deployments, clock skew handling, survivability trade-offs)\nFamiliarity with compliance requirements relevant to IAM: SOC 2, ISO 27001, GDPR data minimization, audit logging\nContributions to open-source security or identity projects\nExperience building or integrating with SCIM, SAML, or enterprise SSO (LDAP / Active Directory)\nBackground in platform or infrastructure engineering - building systems other engineers build on top of\nHands-on, up-to-date experience with modern AI tools (e.g. Claude, Copilot, Cursor) for code generation, review, and accelerating day-to-day engineering work","description_format":"text","description_chars":5693,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Serbia","iso":"RS","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["E-commerce Platforms","Payment Processing & Gateways","Game Development"],"lifecycle":[{"event":"open","at":"2026-06-30T13:14:06Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.864,"p_room":0.36,"age_days":113,"expected_fill_days":66,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/xsolla-staff-software-engineer-identity-access-management","json_url":"https://alion.io/job/xsolla-staff-software-engineer-identity-access-management.json","meta":{"generated_at":"2026-10-22T14:14:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13814,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2375},"rest":"https://alion.io/mcp/rest/get_company?id=2375"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxsolla-staff-software-engineer-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxsolla-staff-software-engineer-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxsolla-staff-software-engineer-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xsolla-staff-software-engineer-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxsolla-staff-software-engineer-identity-access-management"}]}