Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

4 years minimum

Working hours

Shift work

Job source

arc.dev

Tech stack

Query Performance Code Review Protocol Buffers Identity and Access Management PostgreSQL OAuth OpenID Redis Openid Connect Okta Technical Debt Backend

+4 more

Event Driven Architecture Integration Tests Apache Kafka Grpc

Job description

• Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
• Make architectural decisions and document them through ADRs
• Break down larger initiatives into repository-level tasks, estimate delivery, and take ownership of key milestones
• Review code and support the technical development of engineers within the team
• Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
• Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
• Improve existing IAM services while reducing technical debt and simplifying legacy components

Requirements

• 4+ years of production development experience with Go
• Strong understanding of OAuth 2.0 and OpenID Connect at protocol level: Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation
• Production experience with Keycloak: realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades
• Strong experience with MFA: TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, including origin / RP ID specifics for web and mobile
• Understanding of step-up authentication and trust levels using LOA / ACR
• Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
• Strong Go backend experience. Our stack includes echo, pgx, goose, Redis, Kafka (segmentio/kafka-go), gRPC, protobuf, and OpenTelemetry
• Strong PostgreSQL knowledge: schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations
• Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
• Experience with hexagonal architecture and integration testing using testcontainers

Benefits & conditions

• Fully remote work from anywhere in the world
• Flexible working hours focused on results
• 20 paid vacation days + 12 additional bonus days
• 100% paid sick leave
• Paid English lessons
• Support for courses, certifications, and professional training
• Technical ownership of a core IAM domain used across multiple EMCD products

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on arc.dev

Prepare application

• Draft this with your agent
• Open in Claude
• Open in ChatGPT
• Copy prompt