Senior Go Developer (IAM)

About the job

Senior Go Developer (IAM)

EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure. We are looking for a Senior Go Developer to join the IAM team and take ownership of the services behind authentication, registration, MFA, identity, and user access across EMCD products. The role combines hands-on backend development with technical ownership of the IAM domain, including Keycloak-based infrastructure and legacy Go services.

Responsibilities

• Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
• Make architectural decisions and document them through ADRs
• Break down larger initiatives into repository-level tasks, estimate delivery, and take ownership of key milestones
• Review code and support the technical development of engineers within the team
• Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
• Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
• Improve existing IAM services while reducing technical debt and simplifying legacy components

Requirements

• 4+ years of production development experience with Go
• Strong understanding of OAuth 2.0 and OpenID Connect at protocol level: Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation
• Production experience with Keycloak: realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades
• Strong experience with MFA: TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, including origin / RP ID specifics for web and mobile
• Understanding of step-up authentication and trust levels using LOA / ACR
• Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
• Strong Go backend experience. Our stack includes echo, pgx, goose, Redis, Kafka (segmentio/kafka-go), gRPC, protobuf, and OpenTelemetry
• Strong PostgreSQL knowledge: schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations
• Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
• Experience with hexagonal architecture and integration testing using testcontainers

What We Offer

• Fully remote work from anywhere in the world
• Flexible working hours focused on results
• 20 paid vacation days + 12 additional bonus days
• 100% paid sick leave
• Paid English lessons
• Support for courses, certifications, and professional training
• Technical ownership of a core IAM domain used across multiple EMCD products