backend developer for identity platforms

Andersen Global develops technology solutions for international organizations across financial and protection services. The project focuses on a high-performance, scalable distributed platform supporting complex business operations and rapid product growth.

• Design, develop, and operate high-throughput, low-latency identity services, including SSO, MFA, session management, and federation;
• Own features end-to-end from design through production and support;
• Implement and scale authentication and authorization protocols and token formats, including OAuth 2.0, OpenID Connect, and JWTs;
• Write clean, concurrent, and highly performant backend services primarily in Go;
• Design idiomatic, testable code and clear gRPC/HTTP API contracts;
• Deploy, manage, and automate identity infrastructure, including CI/CD, monitoring, and incident response;
• Serve as the subject matter expert on authentication and identity;
• Own internal security reviews and threat modeling for identity flows;
• Guide other teams on secure platform integrations;
• Integrate and maintain custom and standard identity providers, including Keycloak and AWS Cognito;
• Maintain federation patterns;
• Mentor engineers and conduct design reviews;
• Contribute to the team's technical roadmap and security posture.

• 7+ Years of backend engineering experience, including 5+ years with Go;
• Production experience with IAM;
• Strong production experience with Go and gRPC in complex distributed backend systems;
• Deep expertise in authentication and authorization, including OAuth 2.0, OIDC, SSO, MFA, RBAC, JWT, token security, session management, and cryptography;
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10;
• Hands-on experience with AWS, Kubernetes, and Terraform;
• Experience designing high-throughput, low-latency systems with a focus on security and correctness;
• Strong communication skills and ability to explain security and architecture trade-offs to technical and non-technical stakeholders;
• English at Upper-Intermediate level or above;
• Nice to have: Experience with SAML, SCIM, PKI, JWKs/JWKS endpoints, KMS/HSM and token introspection; working knowledge of identity platforms, rate limiting, abuse mitigation, and adaptive authentication.

• Fully remote, office, or hybrid work options are available;
• Opportunity to change the project and develop expertise in an interesting business domain;
• Professional, financial, and career growth opportunities;
• Mentoring and onboarding systems for each new employee;
• Opportunity to earn up to an additional 1,000 EUR per month depending on expertise, included in the annual bonus, by participating in company activities;
• Access to the corporate training portal;
• Corporate events and perks, including parties, pizza days, PlayStation, fruits, coffee, snacks, and movies;
• Certification compensation, including AWS and PMP;
• Referral program;
• Private health insurance and sports compensation, depending on the type of employment;
• Available locations include Albania, Austria, Azerbaijan, Belgium, Bosnia and Herzegovina, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Georgia, Germany, Hungary, Italy, Kosovo, Latvia, Lithuania, Luxembourg, North Macedonia, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, The Netherlands, and Ukraine.