Senior Backend Engineer (Identity & Access Management)

Andersen is hiring for a project building a scalable distributed platform and delivering reliable backend solutions. The customer is an international organization operating in the financial and protection services domain, providing a diverse portfolio of customer-oriented solutions across multiple markets. The project focuses on building and evolving a high-performance, scalable distributed platform developed in Go with emphasis on concurrency, reliability, and maintainability.

• 7+ years experience in backend engineering including 5+ years with Go
• Experience working with IAM in production environments
• Strong experience with Go and gRPC in complex distributed backend systems
• Deep expertise in authentication and authorization protocols including OAuth 2.0, OpenID Connect, SSO, MFA, RBAC, JWT, session management, and cryptography
• Strong understanding of web security, federated identity, secure coding, and OWASP Top 10
• Hands-on experience with AWS, Kubernetes, and Terraform
• Experience designing high-throughput, low-latency systems focused on security and correctness
• Strong communication skills to explain security and architecture trade-offs to technical and non-technical stakeholders
• English proficiency from Upper-Intermediate level and above

Nice to have:

• Experience with SAML, SCIM, PKI, JWKs/JWKS endpoints, key management (KMS/HSM), and token introspection
• Knowledge of identity platforms, rate limiting, abuse mitigation, and adaptive authentication

• Designing, developing, and operating identity services including SSO, MFA, session management, and federation
• Owning features from design through production and support
• Implementing and scaling authentication and authorization protocols and token formats (OAuth 2.0, OpenID Connect, JWTs)
• Writing clean, concurrent, and performant backend services primarily in Go
• Designing testable code and clear API contracts (gRPC/HTTP)
• Deploying, managing, and automating identity infrastructure (CI/CD, monitoring, incident response)
• Leading security reviews, threat modeling for identity flows, and guiding secure integrations
• Integrating and maintaining solutions with identity providers such as Keycloak and AWS Cognito
• Mentoring engineers and contributing to technical roadmap and security posture

Your personal data is protected in accordance with GDPR. The data controller is Andersen Soft UAB in Krakow. Candidates have rights to access, correct, erase, restrict, object to processing, data portability, and to file complaints. Providing data mandatory per labor law provisions; optionally otherwise. Data processed solely for recruitment purposes. Consent can be withdrawn at any time. Data recipients include Just Join IT service and other entities processing data for recruitment.