Senior Go Developer, Authentication, Authorization

This is a fully remote position, open to applicants in Albania, +5 more countries.

📋 Description

• Design, develop, and manage high-throughput, low-latency identity services, which encompass SSO, MFA, session management, and federation.

• Take ownership of features from initial design through to production and ongoing support.

• Implement and scale authentication and authorization protocols along with token formats, including OAuth 2.0, OpenID Connect, and JWTs.

• Develop secure strategies for token issuance, rotation, and revocation.

• Write clean, concurrent, and highly efficient backend services primarily utilizing Go.

• Craft idiomatic, testable code and establish clear gRPC/HTTP API contracts.

• Deploy, manage, and automate identity infrastructure utilizing CI/CD, monitoring, and incident response practices.

• Act as the subject matter expert on authentication and identity-related topics.

• Lead internal security reviews and threat modeling for identity flows.

• Provide guidance to teams on secure platform integrations.

• Integrate and maintain both custom and standard identity providers, such as Keycloak and AWS Cognito, along with federation patterns.

• Mentor engineers, facilitate design reviews, and contribute to the technical roadmap and security posture.

⛳️ Requirements

• Over 7 years of backend engineering experience, with a minimum of 5 years using Go and 3–4 years in authentication, authorization, SSO, MFA, OAuth 2.0, OpenID Connect, JWT, and session management within production environments.

• Strong production background with Go and gRPC, focusing on building complex distributed backend systems.

• Extensive knowledge of authentication and authorization, including OAuth2, OIDC, RBAC, JWT, token security, session management, and cryptography.

• Solid understanding of web security, federated identity, secure coding practices, and the OWASP Top 10.

• Practical experience with AWS, Kubernetes, and Terraform.

• Experience in designing high-throughput, low-latency systems while prioritizing security and correctness.

• Excellent communication skills, capable of articulating security and architectural trade-offs to both technical and non-technical stakeholders.

• Nice to have: Experience with SAML, SCIM, PKI, JWKs/JWKS endpoints, key management (KMS/HSM), and token introspection.

• Nice to have: Familiarity with identity platforms (commercial or open source), rate limiting, abuse mitigation, and adaptive authentication.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Flexible working hours and remote work options.

• Professional development opportunities and support for ongoing education.

• Generous vacation and paid time off policies.