Description
The project is building and evolving a high-performance, scalable distributed platform for complex business operations and rapid product growth. It is developed in Go, with an emphasis on efficient concurrency, reliability, and long-term maintainability. The customer is an international organization in financial and protection services, providing customer-oriented solutions across multiple business areas and markets.
Responsibilities
•Design, develop, and operate high-throughput, low-latency identity services, including SSO, MFA, session management, and federation
•Own features end-to-end, from design through production and support
•Implement and scale authentication and authorization protocols and token formats, including OAuth 2.0, OpenID Connect, and JWTs
•Build clean, concurrent, high-performance backend services primarily in Go
•Design idiomatic, testable code and clear gRPC/HTTP API contracts
•Deploy, manage, and automate identity infrastructure, including CI/CD, monitoring, and incident response
•Own internal security reviews and threat modeling for identity flows, and guide teams on secure platform integrations
•Integrate and maintain custom and standard identity providers, including Keycloak and AWS Cognito, and federation patterns
•Mentor engineers, conduct design reviews, and contribute to the technical roadmap and security posture
Requirements
•7+ years of backend engineering experience, including 5+ years with Go
•Production experience with IAM
•Strong production experience with Go and gRPC building complex distributed backend systems
•Deep expertise in authentication and authorization, including OAuth 2.0, OIDC, SSO, MFA, RBAC, JWT signing, verification and assertions, token security, session management, and cryptography
•Strong understanding of web security, federated identity, secure coding, and OWASP Top 10
•Hands-on experience with cloud platforms, preferably AWS, Kubernetes, and Infrastructure as Code tools such as Terraform, Terragrunt, and OpenTofu/Tofu
•Experience designing high-throughput, low-latency systems with a focus on security and correctness
•Strong communication skills and ability to explain security and architecture trade-offs to technical and non-technical stakeholders
•English at Upper-Intermediate level or above
Nice to have
•SAML, SCIM, PKI, JWKs/JWKS endpoints, KMS/HSM, token introspection, identity platforms, rate limiting, abuse mitigation, adaptive authentication
Conditions
•Additional earnings of up to 1,000 EUR per month, depending on expertise, included in the annual bonus for participating in company activities
•Professional, financial, and career growth opportunities
•Mentoring and onboarding systems for each new employee
•Access to the corporate training portal and company knowledge base
•Corporate events and amenities, including parties, pizza days, PlayStation, fruit, coffee, snacks, and movies
•Certification reimbursement, including AWS and PMP
•Referral program
•Private health insurance and sports compensation, depending on employment type
