Senior Go Developer (IAM)

EMCD; Hong Kong; Remote; HKD 1,177,000 - 1,648,000; Full time

Benefits offered by this job

Fully remote work

Flexible working hours

20 vacation days + 12 bonus days

Paid sick leave

Paid English lessons

Training support

Technical ownership of IAM domain

Job summary

EMCD is seeking a Senior Go Developer to own the IAM services behind authentication, registration, MFA, identity, and user access across EMCD products. The role blends hands-on backend work with technical ownership of the IAM domain, including Keycloak infrastructure and legacy Go services.

You will collaborate with CISO, Compliance, Support, and product teams across Coinhold, Mining, and Backoffice to improve IAM while reducing technical debt.

Qualifications

• 4+ years of production Go development experience.
• Deep knowledge of OAuth 2.0 and OpenID Connect at protocol level.
• Production experience with Keycloak: realms, clients, flows, and identity brokering.
• Strong MFA knowledge: TOTP, SMS/email OTP, push, passkeys/WebAuthn.
• Experience with hexagonal architecture and integration testing.

Responsibilities

• Own the architecture of the IAM domain, including Keycloak-based infra and legacy Go services.
• Document architectural decisions with ADRs.
• Break down initiatives into tasks, estimate delivery, and own milestones.
• Review code and mentor engineers in the team.
• Own production reliability for authentication and registration flows.

Skills

Go backend

OAuth 2.0 & OIDC

MFA

Hexagonal architecture

Code review & mentoring

Tools

Keycloak

Echo

pgx

Redis

Kafka

gRPC

protobuf

OpenTelemetry

Job description

EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure.

We are looking for a Senior Go Developer to join the IAM team and take ownership of the services behind authentication, registration, MFA, identity, and user access across EMCD products.

The role combines hands‑on backend development with technical ownership of the IAM domain, including Keycloak-based infrastructure and legacy Go services.

EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure.

We are looking for a Senior Go Developer to join the IAM team and take ownership of the services behind authentication, registration, MFA, identity, and user access across EMCD products.

The role combines hands‑on backend development with technical ownership of the IAM domain, including Keycloak-based infrastructure and legacy Go services.

Responsibilities

• Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
• Make architectural decisions and document them through ADRs
• Break down larger initiatives into repository‑level tasks, estimate delivery, and take ownership of key milestones
• Review code and support the technical development of engineers within the team
• Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
• Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
• Improve existing IAM services while reducing technical debt and simplifying legacy components

Requirements

• 4+ years of production development experience with Go
• Strong understanding of OAuth 2.0 and OpenID Connect at protocol level: Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource‑side validation
• Production experience with Keycloak: realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major‑version upgrades
• Strong experience with MFA: TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, including origin / RP ID specifics for web and mobile
• Understanding of step‑up authentication and trust levels using LOA / ACR
• Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
• Strong Go backend experience. Our stack includes echo, pgx, goose, Redis, Kafka (segmentio/kafka-go), gRPC, protobuf, and OpenTelemetry
• Strong PostgreSQL knowledge: schema design, indexes, JSONB, query performance at scale, and zero‑downtime migrations
• Experience with event‑driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
• Experience with hexagonal architecture and integration testing using testcontainers

What We Offer

• Fully remote work from anywhere in the world
• Flexible working hours focused on results
• 20 paid vacation days + 12 additional bonus days
• 100% paid sick leave
• Paid English lessons
• Support for courses, certifications, and professional training
• Technical ownership of a core IAM domain used across multiple EMCD products