backend developer for identity platforms

HireHi; United States; Remote; USD 120,000 - 200,000; Full time

Benefits offered by this job

Privately health insurance

Career growth opportunities

Mentoring and onboarding systems

Training portal access

Corporate events and amenities

Certification reimbursement including

Job summary

HireHi ищет опытного бэкенд-инженера для разработки и эксплуатации масштабируемой платформы. Вы будете строить высокопроизводительные identity-сервисы на Go, реализовывать SSO, MFA и федерацию, а также руководить безопасностью и архитектурными решениями.

Вакансия предполагает работу на стыке разработки и инфраструктуры в международной финансовой/защищенной среде. Требуется 7+ лет бэкенд-опыта, глубокие знания IAM, OAuth 2.0, OIDC и JWT.

Qualifications

• 7+ лет опыта бэкенд-разработки, в т.ч. 5+ лет на Go в продуктивной среде IAM.
• Глубокие знания OAuth 2.0, OIDC, SSO, MFA, RBAC, JWT.

Responsibilities

• Design, develop and operate high-throughput identity services with SSO, MFA and federation.
• Own features end-to-end from design to production and support.
• Implement and scale authentication protocols and token formats (OAuth 2.0, OIDC, JWT).
• Build clean, concurrent backend services in Go with gRPC/HTTP APIs.
• Deploy, manage and automate identity infrastructure: CI/CD, monitoring, incident response.
• Lead security reviews and threat modeling for identity flows; guide teams on secure integrations.
• Integrate and maintain Keycloak and AWS Cognito, federation patterns.

Skills

Go

gRPC

IAM

OAuth 2.0

OIDC

JWT

Web security

Kubernetes

AWS

Terraform

Terragrunt

OpenTofu/Tofu

Tools

AWS

Kubernetes

Terraform

Terragrunt

OpenTofu/Tofu

CI/CD

Job description

Описание

The project is building and evolving a high-performance, scalable distributed platform for complex business operations and rapid product growth. It is developed in Go, with an emphasis on efficient concurrency, reliability, and long-term maintainability. The customer is an international organization in financial and protection services, providing customer-oriented solutions across multiple business areas and markets.

Задачи

• Design, develop, and operate high-throughput, low-latency identity services, including SSO, MFA, session management, and federation
• Own features end-to-end, from design through production and support
• Implement and scale authentication and authorization protocols and token formats, including OAuth 2.0, OpenID Connect, and JWTs
• Build clean, concurrent, high-performance backend services primarily in Go
• Design idiomatic, testable code and clear gRPC/HTTP API contracts
• Deploy, manage, and automate identity infrastructure, including CI/CD, monitoring, and incident response
• Own internal security reviews and threat modeling for identity flows, and guide teams on secure platform integrations
• Integrate and maintain custom and standard identity providers, including Keycloak and AWS Cognito, and federation patterns
• Mentor engineers, conduct design reviews, and contribute to the technical roadmap and security posture

Требования

• 7+ Years of backend engineering experience, including 5+ years with Go Production experience with IAM
• Strong production experience with Go and gRPC building complex distributed backend systems
• Deep expertise in authentication and authorization, including OAuth 2.0, OIDC, SSO, MFA, RBAC, JWT signing, verification and assertions, token security, session management, and cryptography
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10
• Hands-on experience with cloud platforms, preferably AWS, Kubernetes, and Infrastructure as Code tools such as Terraform, Terragrunt, and OpenTofu/Tofu
• Experience designing high-throughput, low-latency systems with a focus on security and correctness
• Strong communication skills and ability to explain security and architecture trade-offs to technical and non-technical stakeholders
• English at Upper-Intermediate level or above
• Будет плюсом: SAML, SCIM, PKI, JWKs/JWKS endpoints, KMS/HSM, token introspection, identity platforms, rate limiting, abuse mitigation, adaptive authentication

Условия

• Additional earnings of up to 1,000 EUR per month, depending on expertise, included in the annual bonus for participating in company activities
• Professional, financial, and career growth opportunities
• Mentoring and onboarding systems for each new employee
• Access to the corporate training portal and company knowledge base
• Corporate events and amenities, including parties, pizza days, PlayStation, fruit, coffee, snacks, and movies
• Certification reimbursement, including AWS and PMP
• Referral program
• Private health insurance and sports compensation, depending on employment type