1180 | Go Developer (authentication, authorization)

Intetics Inc.; United States; Remote; USD 160,000 - 230,000; Full time

Job summary

Intetics Inc. is seeking a Senior/Lead Go Backend Engineer with strong IAM expertise to design, build, and operate secure, high-performance authentication services in a full-time role in the United States.

You will own features end-to-end, implement OAuth 2.0/OpenID Connect, JWT, MFA and SSO, mentor engineers, and collaborate with DevOps to deploy identity infrastructure across cloud platforms, including Keycloak and AWS Cognito.

Qualifications

• 7+ years of backend engineering experience.
• 5+ years with Go.
• 3-4+ years working with authentication, authorization, SSO, MFA, OAuth 2.0, OpenID Connect, JWT, and session management.

Responsibilities

• Design, develop, and operate high-throughput identity services: SSO, MFA, session management, federation.
• Own features end-to-end from design through production and support.
• Implement and scale OAuth 2.0, OpenID Connect, JWTs, token issuance, rotation, and revocation.

Skills

Go programming

IAM expertise

Backend architecture

DevOps

Security practices

Mentoring

Communication

OAuth2 / OIDC

JWT handling

Tools

AWS

Kubernetes

Terraform

Keycloak

AWS Cognito

Job description

Описание: Intetics Inc., a global technology company providing custom software application development, distributed professional teams, software product quality assessment, and "all-things-digital" solutions, is seeking a highly skilled and experienced Go Developer to join our dynamic team on a full-time basis. We are looking for a Senior/Lead Go Backend Engineer with strong Identity and Access Management (IAM) expertise to design, build, and operate secure, high-performance authentication services. The candidate should have 7+ years of backend engineering experience, including 5+ years with Go and 3-4+ years working with authentication, authorization, SSO, MFA, OAuth 2.0, OpenID Connect, JWT, and session management in production environments.

Задачи:

• Design, develop, and operate high-throughput, low-latency identity services: Single Sign-On (SSO), Multi-Factor Authentication (MFA), session management, and federation.
• Own features end-to-end from design through production and support.
• Implement and scale modern authentication and authorization protocols and token formats (OAuth 2.0, OpenID Connect, JWTs), including secure token issuance, rotation, and revocation strategies.
• Write clean, concurrent, and highly performant backend services primarily in Go; design idiomatic, testable code and clear API contracts (gRPC/HTTP).
• Use your DevOps experience to deploy, manage, and automate identity infrastructure (CI/CD, monitoring, and incident response).
• Serve as the subject matter expert on authentication and identity: own internal security reviews, threat modeling for identity flows, and guide other teams on secure integrations with our platform.
• Integrate and maintain solutions with custom and standard identity providers (e.g. Keycloak and AWS Cognito), and federation patterns.
• Mentor engineers, conduct design reviews, and contribute to the team's technical roadmap and security posture.

Требования:

• 7+ years of backend engineering experience, including 5+ years with Go and 3-4+ years working with authentication, authorization, SSO, MFA, OAuth 2.0, OpenID Connect, JWT, and session management in production environments
• Strong production experience with Go and gRPC; building complex distributed backend systems
• Deep knowledge of authentication and authorization: OAuth2, OIDC, RBAC, JWT, token security, session management, cryptography
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10
• Hands-on experience with AWS, Kubernetes, and Terraform
• Experience designing high-throughput, low-latency systems with a focus on security and correctness
• Strong communication skills; able to explain security and architecture trade-offs to technical and non-technical stakeholders
• Experience with SAML, SCIM, PKI, JWKs/JWKS endpoints, key management (KMS/HSM) and token introspection. Working knowledge of identity platforms (commercial or open source), rate limiting, abuse mitigation, and adaptive authentication.