backend developer for identity platforms

The project is building and evolving a high-performance, scalable distributed platform for complex business operations and rapid product growth. It is developed in Go, with an emphasis on efficient concurrency, reliability, and long-term maintainability. The customer is an international organization in financial and protection services, providing customer-oriented solutions across multiple business areas and markets.

• Design, develop, and operate high-throughput, low-latency identity services, including SSO, MFA, session management, and federation
• Own features end-to-end, from design through production and support
• Implement and scale authentication and authorization protocols and token formats, including OAuth 2.0, OpenID Connect, and JWTs
• Build clean, concurrent, high-performance backend services primarily in Go
• Design idiomatic, testable code and clear gRPC/HTTP API contracts
• Deploy, manage, and automate identity infrastructure, including CI/CD, monitoring, and incident response
• Own internal security reviews and threat modeling for identity flows, and guide teams on secure platform integrations
• Integrate and maintain custom and standard identity providers, including Keycloak and AWS Cognito, and federation patterns
• Mentor engineers, conduct design reviews, and contribute to the technical roadmap and security posture

• 7+ Years of backend engineering experience, including 5+ years with Go
• Production experience with IAM
• Strong production experience with Go and gRPC building complex distributed backend systems
• Deep expertise in authentication and authorization, including OAuth 2.0, OIDC, SSO, MFA, RBAC, JWT signing, verification and assertions, token security, session management, and cryptography
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10
• Hands-on experience with cloud platforms, preferably AWS, Kubernetes, and Infrastructure as Code tools such as Terraform, Terragrunt, and OpenTofu/Tofu
• Experience designing high-throughput, low-latency systems with a focus on security and correctness
• Strong communication skills and ability to explain security and architecture trade-offs to technical and non-technical stakeholders
• English at Upper-Intermediate level or above
• Будет плюсом: SAML, SCIM, PKI, JWKs/JWKS endpoints, KMS/HSM, token introspection, identity platforms, rate limiting, abuse mitigation, adaptive authentication

• Additional earnings of up to 1,000 EUR per month, depending on expertise, included in the annual bonus for participating in company activities
• Professional, financial, and career growth opportunities
• Mentoring and onboarding systems for each new employee
• Access to the corporate training portal and company knowledge base
• Corporate events and amenities, including parties, pizza days, PlayStation, fruit, coffee, snacks, and movies
• Certification reimbursement, including AWS and PMP
• Referral program
• Private health insurance and sports compensation, depending on employment type