About
EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure.
Responsibilities
•Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
•Make architectural decisions and document them through ADRs
•Break down larger initiatives into repository-level tasks, estimate delivery, and own key milestones
•Review code and support the technical development of engineers within the team
•Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
•Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
•Improve existing IAM services, reduce technical debt, and simplify legacy components
Requirements
•4+ years of production development experience with Go
•Strong understanding of OAuth 2.0 and OpenID Connect at protocol level, including Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation
•Production experience with Keycloak, including realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades
•Strong experience with MFA, including TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, and origin / RP ID specifics for web and mobile
•Understanding of step-up authentication and trust levels using LOA / ACR
•Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
•Strong Go backend experience
•Strong PostgreSQL knowledge, including schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations
•Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
•Experience with hexagonal architecture and integration testing using testcontainers
Conditions
•Fully remote work from anywhere in the world
•Flexible working hours focused on results
•20 paid vacation days + 12 additional bonus days
•100% paid sick leave
•Paid English lessons
•Support for courses, certifications, and professional training
•Technical ownership of a core IAM domain used across multiple EMCD products
