1180 | Senior Go Developer (authentication, authorization)

- Design, develop, and operate high-throughput, low-latency identity services: Single Sign-On (SSO), Multi-Factor Authentication (MFA), session management, and federation.

- Own features end-to-end from design through production and support. -Implement and scale modern authentication and authorization protocols and token formats (OAuth 2.0, OpenID Connect, JWTs), including secure token issuance, rotation, and revocation strategies. -Write clean, concurrent, and highly performant backend services primarily in Go; design idiomatic, testable code and clear API contracts (gRPC/HTTP).

- Use your DevOps experience to deploy, manage, and automate identity infrastructure (CI/CD, monitoring, and incident response).

- Serve as the subject matter expert on authentication and identity: own internal security reviews, threat modeling for identity flows, and guide other teams on secure integrations with our platform. Integrate and maintain solutions with custom and standard identity providers (e.g. Keycloak and AWS Cognito), and federation patterns.

- Mentor engineers, conduct design reviews, and contribute to the team's technical roadmap and security posture.

• 7+ years of backend engineering experience, including 5+ years with Go and 3–4+ years working with authentication, authorization, SSO, MFA, OAuth 2.0, OpenID Connect, JWT, and session management in production environments
• Strong production experience with Go and gRPC; building complex distributed backend systems
• Deep knowledge of authentication and authorization: OAuth2, OIDC, RBAC, JWT, token security, session management, cryptography
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10
• Hands-on experience with AWS, Kubernetes, and Terraform
• Experience designing high-throughput, low-latency systems with a focus on security and correctness
• Strong communication skills; able to explain security and architecture trade-offs to technical and non-technical stakeholders

• Experience with SAML, SCIM, PKI, JWKs/JWKS endpoints, key management (KMS/HSM) and token introspection.
• Working knowledge of identity platforms (commercial or open source), rate limiting, abuse mitigation, and adaptive authentication.