go developer for identity and access management

EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure.

• Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
• Make architectural decisions and document them through ADRs
• Break down larger initiatives into repository-level tasks, estimate delivery, and own key milestones
• Review code and support the technical development of engineers within the team
• Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
• Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
• Improve existing IAM services, reduce technical debt, and simplify legacy components

• 4+ Years of production development experience with Go
• Strong understanding of OAuth 2.0 and OpenID Connect at protocol level, including Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation
• Production experience with Keycloak, including realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades
• Strong experience with MFA, including TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, and origin / RP ID specifics for web and mobile
• Understanding of step-up authentication and trust levels using LOA / ACR
• Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
• Strong Go backend experience
• Strong PostgreSQL knowledge, including schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations
• Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
• Experience with hexagonal architecture and integration testing using testcontainers

• Fully remote work from anywhere in the world
• Flexible working hours focused on results
• 20 Paid vacation days + 12 additional bonus days
• 100% Paid sick leave
• Paid English lessons
• Support for courses, certifications, and professional training
• Technical ownership of a core IAM domain used across multiple EMCD products