Jobs Companies Xsolla Staff Software Engineer — Identity & Access Management

About this Staff Software Engineer — Identity & Access Management role at Xsolla

Xsolla · Remote · Canada

ABOUT YOU

We're looking for a Staff Engineer to join our Identity & Access Management (IAM) platform team. This is an individual contributor role with outsized technical scope: you'll be the technical anchor for how Xsolla builds secure, high-scale auth infrastructure — setting direction, making hard architectural calls, and raising the bar across the org.

You will own the strategy behind authentication, authorization, and session management at scale, and evolve our OAuth 2.0 / OIDC flows and token lifecycle to meet both product and compliance needs. You operate with significant autonomy, but your decisions ripple across teams — so you'll spend real time building buy-in with engineering and security stakeholders, not just designing in isolation.

You are technically deep, calm under pressure, and comfortable being the escalation point when production IAM issues get hard. You write the RFCs and design docs that people actually read, and you create leverage for the broader engineering org through documentation, tooling, and mentorship — without needing a management title to do it.

 

ABOUT US

Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.

For more information, visit xsolla.com.

 

Responsibilities

  • Own IAM Architecture & Strategy — Own the technical strategy and architecture of our IAM platform, covering authentication, authorization, and session management at scale.
  • Design Auth Protocols — Design and evolve our OAuth 2.0 / OIDC flows, token lifecycle, and security primitives to meet both product and compliance requirements.
  • Drive Cross-Team Technical Decisions — Drive decisions on protocol design, data modeling, and platform reliability, and build buy-in across engineering and security teams.
  • De-Risk Proactively — Identify systemic risks and performance bottlenecks; lead initiatives to resolve them before they become incidents.
  • Set Engineering Standards — Define engineering standards, review critical code and designs, and create leverage for the team through documentation, tooling, and mentorship.
  • Align with Stakeholders — Collaborate with product, security, and infra teams to align on roadmap and translate business needs into well-scoped technical plans.
  • Own Production Escalations — Serve as the go-to escalation point for complex production issues in the IAM domain.
  • Requirements

    Identity & Security

    • OAuth 2.0 / OIDC Depth — Deep understanding of OAuth 2.0, OIDC, and related auth flows: authorization code + PKCE, client credentials, device flow, token introspection, refresh strategies.
    • Web Security Fundamentals — Solid grasp of cookie security, CSRF, XSS, token storage, TLS, and secure session management.
    • Production IAM Experience — Experience designing or operating production-grade IAM or auth systems.
    • Domain Context

      • Gaming Industry Experience — Experience working in the video game industry, building or operating platforms for game developers, publishers, or players.

      Backend Engineering

      • Go Engineering — Strong Go (Golang) engineering skills: idiomatic code, concurrency patterns, performance profiling.
      • Distributed Systems — Experience with distributed systems and their trade-offs (consistency, availability, failure modes).
      • Data & Infrastructure

        • PostgreSQL — Schema design, query optimization, migrations at scale.
        • Kubernetes — Deploying, operating, and debugging services in a k8s environment.
        • Message Streaming — Kafka or NATS — event-driven patterns, consumer groups, at-least-once delivery.
        • Git & CI/CD — Git and modern CI/CD practices.
        • Leadership

          • Cross-Team Initiative Leadership — Proven ability to lead multi-quarter technical initiatives across teams.
          • Architectural Influence — Track record of influencing architecture and standards beyond your immediate team.
          • Written & Verbal Communication — You write RFCs and design docs that people actually read.

    Nice to Have

  • Hands-on experience with the Ory ecosystem (Hydra, Kratos, Keto) — operating it in production or building on top of its APIs
  • Experience with CockroachDB or other distributed SQL databases (multi-region deployments, clock skew handling, survivability trade-offs)
  • Familiarity with compliance requirements relevant to IAM: SOC 2, ISO 27001, GDPR data minimization, audit logging
  • Contributions to open-source security or identity projects
  • Experience building or integrating with SCIM, SAML, or enterprise SSO (LDAP / Active Directory)
  • Background in platform or infrastructure engineering — building systems other engineers build on top of
  • Hands-on, up-to-date experience with modern AI tools (e.g. Claude, Copilot, Cursor) for code generation, review, and accelerating day-to-day engineering work

  • Benefits:

    We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play.

    Equal Employment Opportunity Statement:

    Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act.

    Criminal History Consideration:

    For the Staff Engineer, we will conduct a background check that may include the following: 

    • Criminal history check

    • Employment verification

    • Education verification

    Relevance to Job Responsibilities:

    The background check is relevant to this position because of the following role responsibilities:

    • Working with vulnerable populations

    • Accessing confidential company data

    • Ensuring compliance with regulatory requirements

    Rights Under the Fair Chance Act:

    Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact [email protected].

    By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with this Xsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to [email protected].



    Ready to apply to Xsolla?
    Apply to Xsolla

    Similar jobs

    Okta
    Staff Product Security Engineer, Reviews
    Okta
    ⚡ Apply early Bellevue, Washington; Chicago,... Onsite $180,000–$247,500
    ● New 👁 Seen ✓ Applied 5h ago
    Okta
    Staff Software Engineer in Test, Linux
    Okta
    ⚡ Apply early Toronto, Ontario, Canada Onsite CA$140,000–CA$192,500
    ● New 👁 Seen ✓ Applied 5h ago
    Okta
    Staff Software Engineer, Developer Platform (Auth0)
    Okta
    ⚡ Apply early Toronto, Ontario, Canada Onsite CA$160,000–CA$220,000
    ● New 👁 Seen ✓ Applied 5h ago
    Tenstorrent
    Staff, Component Engineer
    Tenstorrent
    ⚡ Apply early Santa Clara, California, Unite... Onsite $100,000–$500,000
    ● New 👁 Seen ✓ Applied 14h ago
    Mimica
    Staff/Lead Python Engineer (FastAPI, Orchestration)
    Mimica
    ⚡ Apply early Remote Anywhere · location restricted
    ● New 👁 Seen ✓ Applied 20h ago
    Twilio
    Staff Software Engineer (L4)
    Twilio
    ⚡ Apply early Remote - Canada · location restricted $160,320–$200,400
    ● New 👁 Seen ✓ Applied 1d ago
    AD
    Staff Engineer, Field Applications
    Analog Devices
    ⚡ Apply early China, Shanghai, Puxi Onsite
    ● New 👁 Seen ✓ Applied 47m ago
    SailPoint
    Senior Staff Software Engineer - Java Sustaining
    SailPoint
    ⚡ Apply early Pune, India Hybrid
    ● New 👁 Seen ✓ Applied 1h ago
    Ajaib
    Senior/Staff DevOps Engineer / SRE
    Ajaib
    ⚡ Apply early Jakarta, Jakarta, Indonesia Onsite
    ● New 👁 Seen ✓ Applied 4h ago

    Sign up for suggestions tailored to the jobs you open and the searches you save.

    More jobs at Xsolla

    See all jobs at Xsolla →

    Apply now
    🤖

    Whoa — hold up

    JobsRadar was built for real people having a rough time in their job search — not for automated requests. You're clicking way too fast and you're now temporarily blocked.

    Come back later. If you're genuinely job hunting, we've got your back — just act like a human.

    Catch your next role the second it’s posted.

    Create a free account and we’ll watch the boards for you — the instant a job matches your search, it lands in your inbox or Telegram. No digging, no refreshing.

    Create free account

    Free forever · takes 30 seconds · already have one?

    Get an edge on your job hunt.

    Join our Telegram channel for the stuff that helps you land the role — salary benchmarks, the weekly market pulse, and new-feature drops. No spam, just signal.

    Join the channel — it's free