Team Lead, Backend Engineer

• Own the technical strategy and architecture of the Xsolla ID IAM platform, covering authentication, authorization, and session management at scale
• Design and evolve OAuth 2.0 / OIDC flows, token lifecycle strategies, and security primitives
• Lead decisions on the Ory ecosystem, custom authentication methods, and the Auth API orchestrator/plugin architecture
• Own web security fundamentals across the platform
• Drive CockroachDB strategy for geo-distributed data residency
• Review complex security-critical code and ensure best practices
• Drive zero-downtime migration from legacy Xsolla Login with bidirectional identity synchronization
• Identify systemic risks and performance bottlenecks and lead remediation initiatives
• Make key decisions on system design, security architecture, and technology choices
• Maintain hands-on contribution to critical security features
• Lead and mentor up to 8 backend engineers
• Conduct 1:1s, performance reviews, and career development conversations
• Hire and onboard team members with IAM/security expertise
• Foster a security-first culture and manage team workload and delivery commitments
• Own delivery predictability for the mission-critical platform
• Collaborate with Product to define the IAM roadmap and priorities
• Coordinate with dependent product teams including Xsolla Pay, Wallet, App, and Backpack
• Report on security posture, platform reliability, and team progress

• 5+ years of commercial experience with Go, or 7+ years with other backend languages with Go proficiency
• Deep expertise in OAuth 2.0 / OIDC and IAM systems
• Knowledge of authorization code + PKCE, client credentials, device flow, token introspection, and refresh strategies
• Understanding of JWT, token refresh flows, and session management
• Knowledge of password hashing (bcrypt, Argon2) and secure storage
• Web security fundamentals: cookie security, CSRF, XSS, TLS, and secure session management
• Strong knowledge of MySQL/PostgreSQL and Redis
• Experience with distributed systems and their trade-offs
• Experience with high-availability system design meeting 99.9%+ uptime requirements
• Understanding of security best practices and common vulnerabilities (OWASP)
• Experience with Docker, Kubernetes, and production deployments
• 2+ years of experience leading engineering teams
• Track record of delivering mission-critical infrastructure
• Ability to lead multi-quarter technical initiatives across teams and influence architecture beyond the immediate team
• Experience with security-focused code review processes
• Strong written and verbal communication, including RFCs and design documents
• Ability to balance security requirements with delivery timelines
• Hands-on experience with the Ory ecosystem preferred
• Experience with CockroachDB or other distributed SQL databases preferred
• Experience with NATS or Kafka preferred
• Experience with WebAuthn/FIDO2 passkey implementations preferred
• Knowledge of Web3 authentication preferred
• Experience with SCIM, SAML, or enterprise SSO preferred
• Background in fintech, payments, or gaming identity systems preferred
• Familiarity with SOC 2, ISO 27001, PCI DSS, GDPR data minimization, and audit logging preferred
• Contributions to open-source security or identity projects preferred
• Background in platform or infrastructure engineering preferred
• Experience with large-scale user migrations preferred
• Practical, up-to-date experience with modern AI tools preferred

• Unlimited Flexible Time Off for work-life balance
• Private health insurance (ДМС) with dental coverage for you and your family
• Personalized career roadmap with clear growth paths
• Professional development through training, security certifications, and conferences
• Annual corporate events and team gatherings
• Remote-first culture with flexible working hours (10:00–19:00)
• Leadership development programs and executive coaching
• Competitive compensation reflecting leadership and security expertise