← к выдаче
разработка

Senior Go Developer (IAM)

EMCDBelgrade, RS3 дн. назад

Коротко

Owns IAM domain architecture including Keycloak infrastructure and legacy Go services; makes architectural decisions, reviews code, and owns production · Needs: 4+ years production Go; strong OAuth 2.0/OIDC protocol knowledge; production Keycloak experience; MFA experience with TOTP, OTP, push, passkeys/WebAuthn.

Описание от работодателя

EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure. We are looking for a Senior Go Developer to join the IAM team and take ownership of the services behind authentication, registration, MFA, identity, and user access across EMCD products. The role combines hands-on backend development with technical ownership of the IAM domain, including Keycloak-based infrastructure and legacy Go services. Responsibilities Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services Make architectural decisions and document them through ADRs Break down larger initiatives into repository-level tasks, estimate delivery, and take ownership of key milestones Review code and support the technical development of engineers within the team Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice Improve existing IAM services while reducing technical debt and simplifying legacy components Requirements 4+ years of production development experience with Go Strong understanding of OAuth 2.0 and OpenID Connect at protocol level: Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation Production experience with Keycloak: realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades Strong experience with MFA: TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, including origin / RP ID specifics for web and mobile Understanding of step-up authentication and trust levels using LOA / ACR Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration Strong Go backend experience. Our stack includes echo, pgx, goose, Redis, Kafka (segmentio/kafka-go), gRPC, protobuf, and OpenTelemetry Strong PostgreSQL knowledge: schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ Experience with hexagonal architecture and integration testing using testcontainers What We Offer Fully remote work from anywhere in the world Flexible working hours focused on results 20 paid vacation days + 12 additional bonus days 100% paid sick leave Paid English lessons Support for courses, certifications, and professional training Technical ownership of a core IAM domain used across multiple EMCD products