About the Role
Xsolla is a global commerce company that provides tools and services to help video game developers fund, distribute, market, and monetize their games. Its Xsolla ID platform is a centralized identity provider for the Xsolla ecosystem, enabling authentication and authorization across B2C products and partner integrations.
Responsibilities
•Develop and maintain backend services for the Xsolla ID platform using Go
•Design and implement OAuth 2.0 / OIDC flows, token introspection, and refresh strategies
•Work with the Ory ecosystem and extend the custom Auth API orchestrator and plugin architecture
•Apply web security fundamentals, including cookie security, CSRF/XSS protection, secure token storage, TLS, and secure session management
•Optimize database queries and maintain performance under heavy loads
•Build and maintain a reliable, scalable microservices architecture
•Contribute to zero-downtime migration from legacy Xsolla Login with bidirectional identity sync
•Write clean, well-tested code with unit and integration test coverage
•Collaborate with frontend engineers on SDK and widget integration
•Participate in code reviews and contribute to technical documentation
•Support production systems and troubleshoot issues across the authentication stack
Requirements
•2+ Years of commercial experience with Go
•Strong understanding of PostgreSQL and Redis, including query optimization and indexing strategies
•Working knowledge of OAuth 2.0 / OIDC authentication flows or strong motivation to learn
•Understanding of web security fundamentals, including CSRF, XSS, cookie security, and TLS
•Experience with Docker and docker-compose
•Proficiency with Git and collaborative development workflows
•Understanding of Nginx and web server configuration
•Experience writing unit tests and maintaining high code quality
•Good English reading skills for technical documentation
Nice to Have
•Microservices architecture, distributed systems
•REST API design and Swagger/OpenAPI
•CI/CD pipelines
•Ory ecosystem
•PKCE and authentication flows
•CockroachDB or other distributed SQL databases
•NATS, Kafka or RabbitMQ
•Jira
•Kubernetes
•IAM compliance requirements (SOC 2, ISO 27001, GDPR data minimization, audit logging)
•Modern AI tools such as Claude, Copilot or Cursor
Conditions
•Unlimited flexible time off
•Private health insurance with dental coverage for you and your family
•Personalized career roadmap with IC and Leadership track options
•Professional development through training and educational opportunities
•Annual corporate events and team gatherings
•Flexible working hours (10:00–19:00)
