Senior Go Developer (IAM)

EMCD · Serbia · posted today ago

Listing supplied by Himalayas. 101 Careers did not originate this post and applications are handled by the employer.

About this role

EMCD is a global crypto ecosystem building products across mining, wallets, payments, custody, and digital asset infrastructure.

We are looking for a Senior Go Developer to join the IAM team and take ownership of the services behind authentication, registration, MFA, identity, and user access across EMCD products.

The role combines hands-on backend development with technical ownership of the IAM domain, including Keycloak-based infrastructure and legacy Go services.

Responsibilities

Own the architecture of the IAM domain, including Keycloak-based infrastructure and legacy Go services
Make architectural decisions and document them through ADRs
Break down larger initiatives into repository-level tasks, estimate delivery, and take ownership of key milestones
Review code and support the technical development of engineers within the team
Own production reliability for authentication and registration flows: investigate incidents, write postmortems, and drive follow-up actions to completion
Work closely with CISO, Compliance, Support, and product teams including Coinhold, Mining, and Backoffice
Improve existing IAM services while reducing technical debt and simplifying legacy components

Requirements

4+ years of production development experience with Go
Strong understanding of OAuth 2.0 and OpenID Connect at protocol level: Authorization Code + PKCE, refresh token rotation, token exchange, Direct Grant and its risks, JWT signing, claims, and resource-side validation
Production experience with Keycloak: realms, clients, authentication flows, required actions, identity brokering with Google, Apple, or external OIDC providers, and major-version upgrades
Strong experience with MFA: TOTP, SMS and email OTP, push authentication, passkeys and WebAuthn, including origin / RP ID specifics for web and mobile
Understanding of step-up authentication and trust levels using LOA / ACR
Experience managing user sessions and devices, session revocation, session hijacking protection, and secure cookie configuration
Strong Go backend experience. Our stack includes echo, pgx, goose, Redis, Kafka (segmentio/kafka-go), gRPC, protobuf, and OpenTelemetry
Strong PostgreSQL knowledge: schema design, indexes, JSONB, query performance at scale, and zero-downtime migrations
Experience with event-driven systems and patterns such as transactional outbox, idempotency, retries, and DLQ
Experience with hexagonal architecture and integration testing using testcontainers