go developer for identity and access management

EMCD; United States; Remote; USD 180,000 - 250,000; Full time

Benefits offered by this job

Fully remote work

Flexible hours

30 days vacation or equivalent

Job summary

EMCD ищет ведущего архитектора IAM для глобального крипто-экосистемы. Вы возьмете на себя архитектуру домена IAM и связанные сервисы на Go, будете принимать архитектурные решения и документировать ADR-ы. Требуется опыт работы с Keycloak, MFA и PostgreSQL, знание HEX-архитектуры и паттернов событий.

Удаленная работа по всему миру с гибким графиком, поддержка профессионального роста и обучения, ответственность за надежность аутентификации и регистрации.

Qualifications

• 4+ года разработки на Go в production.
• Знгание OAuth 2.0 / OpenID Connect на протокольном уровне.
• Production опыт с Keycloak и внешними OIDC провайдерами.
• МФА: TOTP, SMS и WebAuthn.
• Опыт работы с PostgreSQL: схемы, индексы, JSONB.
• Опыт проектирования на основе событий и использования Testcontainers.

Responsibilities

• Несите архитектуру IAM, включая Keycloak и сервисы на Go.
• Принимать архитектурные решения и документировать ADR-ы.
• Разбивать инициативы на задачи и оценивать сроки поставки.
• Проводить ревью кода и наставлять инженеров.
• Обеспечение надежности аутентификации и регистрации, разбор инцидентов и постмортемы.
• Сотрудничать с CISO, Compliance, Support и продуктами EMCD.
• Улучшать IAM, снижать технический долг и упрощать legacy.

Skills

Go backend development

OAuth 2.0 / OpenID Connect

Security design & MFA

Event-driven architectures

Hexagonal architecture

Code review mentoring

Tools

Keycloak

PostgreSQL

Testcontainers

Job description

Описание: EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure.

Задачи:

• Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
• Make architectural decisions and document them through ADRs
• Break down larger initiatives into repository-level tasks, estimate delivery, and own key milestones
• Review code and support the technical development of engineers within the team
• Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
• Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
• Improve existing IAM services, reduce technical debt, and simplify legacy components

Требования:

• 4+ Years of production development experience with Go
• Strong understanding of OAuth 2.0 and OpenID Connect at protocol level, including Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation
• Production experience with Keycloak, including realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades
• Strong experience with MFA, including TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, and origin / RP ID specifics for web and mobile
• Understanding of step-up authentication and trust levels using LOA / ACR
• Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
• Strong Go backend experience
• Strong PostgreSQL knowledge, including schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations
• Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
• Experience with hexagonal architecture and integration testing using testcontainers

Условия:

• Fully remote work from anywhere in the world
• Flexible working hours focused on results
• 20 Paid vacation days + 12 additional bonus days
• 100% Paid sick leave
• Paid English lessons
• Support for courses, certifications, and professional training
• Technical ownership of a core IAM domain used across multiple EMCD products