> Markdown version of [/jobs/ext/3774284-senior-go-developer-iam](https://www.wearedevelopers.com/jobs/ext/3774284-senior-go-developer-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Go Developer (IAM)

- **Company:** EMCD LLC
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Query Performance, Code Review, Protocol Buffers, Identity and Access Management, PostgreSQL, OAuth, OpenID, Redis, Openid Connect, Okta, Technical Debt, Backend, Event Driven Architecture, Integration Tests, Apache Kafka, Grpc
- **Published:** October 16, 2026
- **Apply:** https://arc.dev/remote-jobs/j/redirect/przbrkvjdj

## About the Role

* 4+ years of production development experience with Go
 * Strong understanding of OAuth 2.0 and OpenID Connect at protocol level: Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation
 * Production experience with Keycloak: realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades
 * Strong experience with MFA: TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, including origin / RP ID specifics for web and mobile
 * Understanding of step-up authentication and trust levels using LOA / ACR
 * Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
 * Strong Go backend experience. Our stack includes echo, pgx, goose, Redis, Kafka (segmentio/kafka-go), gRPC, protobuf, and OpenTelemetry
 * Strong PostgreSQL knowledge: schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations
 * Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
 * Experience with hexagonal architecture and integration testing using testcontainers

## Description

* Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
 * Make architectural decisions and document them through ADRs
 * Break down larger initiatives into repository-level tasks, estimate delivery, and take ownership of key milestones
 * Review code and support the technical development of engineers within the team
 * Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
 * Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
 * Improve existing IAM services while reducing technical debt and simplifying legacy components