Senior Backend Engineer (Identity & Access Management)

Quick Facts

• Role: Senior Backend Engineer (Identity & Access Management)

Description

Build and evolve high-throughput, low-latency identity services (SSO, MFA, session management, federation) for a scalable distributed platform. You will own features end-to-end, implementing secure authentication/authorization protocols and token strategies, and delivering reliable Go-based backend services with clear API contracts. You’ll also act as a subject matter expert for authentication and identity security, supporting threat modeling and secure integrations.

Responsibilities

• Design, develop, and operate identity services for SSO, MFA, session management, and federation
• Own features end-to-end from design through production and support
• Implement and scale OAuth 2.0, OpenID Connect, and JWT-based authentication/authorization, including secure token issuance, rotation, and revocation
• Write clean, concurrent, high-performance backend services primarily in Go
• Define idiomatic, testable code and clear API contracts using gRPC/HTTP
• Use DevOps practices to deploy, manage, and automate identity infrastructure (CI/CD, monitoring, incident response)
• Serve as an authentication/identity SME: security reviews, threat modeling for identity flows, and guidance for secure platform integrations
• Integrate and maintain identity providers and federation patterns (e.g., Keycloak, AWS Cognito)
• Mentor engineers, run design reviews, and contribute to technical roadmap and security posture

Requirements

• 7+ years of backend engineering experience, including 5+ years with Go
• IAM production experience
• Strong production experience with Go and gRPC for complex distributed backend systems
• Deep expertise in authentication/authorization: OAuth 2.0, OIDC, SSO, MFA, RBAC, JWT signing/verification/assertions, token security, session management, cryptography
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10
• Hands-on experience with cloud platforms (AWS preferred), Kubernetes, and Infrastructure as Code (Terraform, Terragrunt and OpenTofu/Tofu)
• Ability to design high-throughput, low-latency systems with security and correctness
• Strong communication skills for explaining security and architecture trade-offs
• English level: Upper-Intermediate or above

Benefits

• Fully remote or hybrid work options
• Professional, financial, and career growth with mentoring and onboarding
• Up to an additional 1,000 EUR per month via annual bonus activities
• Access to a continuously updated corporate training portal
• Certification compensation (e.g., AWS, PMP)
• Referral program
• Private health insurance and sports compensation (depending on employment type)