Middle/Senior Backend Engineer

This is a fully remote position, open to applicants in Russia.

📋 Description

• Create and manage backend services for the Xsolla ID platform utilizing Go.

• Design and execute OAuth 2.0 / OIDC flows, token introspection, and refresh strategies.

• Collaborate with the Ory ecosystem to enhance the custom Auth API orchestrator and plugin architecture.

• Implement web security principles including cookie security, CSRF/XSS protection, secure token storage, TLS, and secure session management.

• Optimize database queries to ensure superior performance under heavy loads across PostgreSQL, MySQL, Redis, and CockroachDB.

• Develop and uphold a microservices architecture aimed at reliability and scalability.

• Assist in the zero-downtime migration from the legacy Xsolla Login, ensuring bidirectional identity synchronization.

• Produce clean, well-tested code with extensive unit and integration test coverage.

• Work alongside frontend engineers on SDK and widget integrations.

• Engage in code reviews and contribute to the creation of technical documentation.

• Provide support for production systems and resolve issues within the authentication stack.

• Build a next-generation IAM platform that acts as the foundation for Xsolla B2C products.

⛳️ Requirements

• A minimum of 2 years of commercial experience with Go.

• Strong knowledge of PostgreSQL and Redis, including query optimization and indexing strategies.

• Familiarity with OAuth 2.0 / OIDC authentication flows (authorization code, client credentials) or a strong desire to learn.

• Understanding of web security principles: CSRF, XSS, cookie security, TLS.

• Experience with Docker and docker-compose.

• Proficient in Git and collaborative development practices.

• Understanding of Nginx and web server configuration.

• Solid background in writing unit tests and maintaining high code quality.

• Good English reading skills, particularly regarding technical documentation.

• Preferred: knowledge of microservices architecture and the trade-offs of distributed systems.

• Preferred: experience in REST API design and Swagger/OpenAPI.

• Preferred: hands-on experience with CI/CD pipelines.

• Preferred: familiarity with the Ory ecosystem (Hydra, Kratos, Keto) or similar identity management frameworks.

• Preferred: understanding of PKCE, client credentials, device flow, token introspection, and refresh-token strategies.

• Preferred: experience with CockroachDB or other distributed SQL databases.

• Preferred: experience with messaging systems such as NATS, Kafka, or RabbitMQ.

• Preferred: familiarity with Jira.

• Preferred: understanding of Kubernetes and container orchestration.

• Preferred: knowledge of SOC 2, ISO 27001, GDPR data minimization, and audit logging.

• Preferred: practical, up-to-date experience with modern AI tools like Claude, Copilot, or Cursor.

🏝️ Benefits

• Unlimited Flexible Time Off to support work-life balance.

• Private health insurance (ДМС) including dental coverage for you and your family.

• A personalized career roadmap with distinct growth paths (IC track or Leadership track).

• Opportunities for professional development through training and educational initiatives.

• Annual corporate events and team gatherings.

• A remote-first culture with flexible working hours (10:00–19:00).

• Engage in the rapidly expanding gaming and Web3 industry at the forefront of innovation.

• A culture of knowledge sharing with experienced engineers across the organization.