Lead Xsolla's global IAM system architecture, building a comprehensive, scalable, and secure platform from scratch for game monetization and distribution, while managing and mentoring an R&D team to ensure robust, compliant solutions.
ABOUT US
Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators.
Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.
For more information, visit xsolla.com.
ABOUT YOU
We are looking for a Senior IAM Architect (Team Lead) who is a visionary leader, highly analytical, and results-oriented to join our Core Engineering team. The best candidate will be someone who thrives in a fast-paced, highly collaborative, and exceptionally dynamic setting and is excited to lead the top-level architecture planning, build a comprehensive Identity and Access Management (IAM) system from scratch, and standardize technical frameworks to support our global business expansion.
Strong architectural design, high-concurrency system design, and technical leadership skills are essential, along with experience in backend development, cloud-native architecture, and enterprise-grade IAM/IDaaS platforms. The ability to drive complex technical problem-solving, oversee end-to-end project delivery, and seamlessly communicate in English with international teams will be key to your success in this role.
If you’re passionate about building highly scalable and secure access control systems and love safeguarding global platforms that empower game developers to monetize and distribute their games securely, we would love to hear from you!
Top-level Architecture Design: Lead the overall strategic planning, technical roadmap, and architectural design for the company's global IAM system, covering account lifecycles, authentication, authorization, SSO, identity governance, risk control, and Privileged Access Management (PAM).
Architecture Standardization: Establish unified technical specifications, architecture standards, and implementation guidelines to support complex business scenarios, including hybrid cloud, multi-business lines, and international expansion.
Core System 0-1 Build & Refactoring: Spearhead the zero-to-one construction of an enterprise-level unified IAM platform, or lead the comprehensive architectural upgrade, refactoring, and security enhancement of existing legacy identity systems to resolve bottlenecks and compliance gaps.
Team Management: Build, mentor, and manage the IAM R&D team; oversee task breakdown, technical reviews, talent development, and the implementation of standardized workflows.
End-to-End Delivery: Take full ownership of the project lifecycle—from requirements and design to R&D, testing, deployment, and operations—ensuring 100% successful delivery, stable launches, and efficient iterations.
Technical Problem Solving: Tackle core technical challenges such as high concurrency, high availability, data consistency, fine-grained access control, cross-domain access, federated identity, and multi-tenant isolation.
Security & Optimization: Optimize RBAC/ABAC models, MFA, passwordless authentication, and automated governance capabilities based on Zero Trust principles, ensuring the platform complies with international security and data protection standards.
Cross-Functional Enablement: Author IAM architecture whitepapers and integration standards; collaborate with business, security, frontend, and cloud teams to provide standardized identity solutions for internal systems, SaaS products, and overseas businesses.
International Collaboration: Autonomously draft technical documentation in English, present technical solutions, and seamlessly collaborate with overseas teams on international requirements and technical discussions.
Core Experience: Must possess core architecture/R&D experience in top-tier public cloud IAM platforms (e.g., Alibaba Cloud RAM, Volcengine IAM, Tencent Cloud CAM), with deep involvement in product iteration and architectural evolution.
Proven Track Record: Extensive experience in building large-scale IAM platforms from scratch (0-1), or leading the comprehensive architectural refactoring of enterprise IAM systems for tens of millions of users, with the ability to independently deliver end-to-end solutions.
Professional Background: 8+ years of experience in backend development, cloud-native, or network security architecture, with at least 5 years focused on enterprise-level IAM/IDaaS/4A identity governance platform design.
Leadership Skills: 3+ years of technical team management experience, demonstrating strong capabilities in independent top-level architecture design, tackling complex technical challenges, and team leadership with quantifiable, successful delivery results (no failed projects or major live incidents).
Language Proficiency: Fluent in English (both spoken and written), with the ability to independently conduct technical communications, author English technical specifications, and collaborate seamlessly with global teams without barriers.
IAM Mastery: Deep expertise in core IAM frameworks, including account lifecycle management, SSO, federated identity, permission models (RBAC/ABAC/PBAC), principle of least privilege, access auditing, and privileged account management.
Protocol & Security Expertise: Mastery of mainstream identity and security protocols (OAuth 2.0, OIDC, SAML, CAS, JWT), and strong familiarity with Zero Trust architecture, multi-tenant isolation, and fine-grained access control design.
System Design: Proficiency in distributed, microservices, and cloud-native architectures, with strong expertise in designing high-concurrency and high-availability systems for large-scale B2B enterprise middle-office platforms.
Soft Skills: Exceptional business acumen and architectural foresight, strong logic, excellent cross-departmental collaboration skills, and a results-oriented mindset focused on high-quality delivery.
Experience building and delivering global identity middle-office or IDaaS platforms for top-tier internet companies, cloud vendors, or large enterprise groups.
Previous experience delivering overseas IAM projects or building identity systems for international SaaS products.
Familiarity with cutting-edge identity technologies such as Information Technology Application Innovation (Xinchuang), Zero Trust security, privacy computing, and passwordless authentication.
Experience in building commercialized IAM products from scratch and empowering external customers with end-to-end implementation.
Job Description
This job description is intended to outline the general nature and level of work currently performed and is not an exhaustive list of all duties, responsibilities, or qualifications required.
Privacy Notice & Data Processing Consent By submitting your application and uploading your resume/CV, you acknowledge and agree that Xsolla will process your personal information (including but not limited to your name, contact details, work experience, and educational background) for the purpose of recruitment, candidate evaluation, and internal record-keeping.
In accordance with the Personal Information Protection Law of the People's Republic of China (PIPL):
Purpose Limitation: Your data will only be used for current and future recruitment considerations within Xsolla. Sensitivity: We will handle your personal information with a high duty of care. Your Rights: You have the right to access, correct, or delete your personal information, and to withdraw your consent at any time by contacting us.
If your application proceeds past the final interview stage, we may conduct a background check, subject to applicable laws and regulations, only after obtaining your separate written consent. Any such check will be strictly limited to information directly relevant to the employment relationship (e.g., educational background, employment history) and will comply fully with the PIPL. Your personal information will be used solely for recruitment and human resource management purposes, and we will implement rigorous security measures to protect your data.
Xsolla takes your privacy rights seriously. We are committed to protecting your personal information in accordance with Chinese data protection laws and will not sell, unlawfully provide, or disclose any personal data received during the hiring process without your explicit authorization. As a data processor, we uphold our obligations to safeguard your personal data and respect your privacy.
For any inquiries related to data privacy, please contact: careers@xsolla.com For more vacancies: Careers | Xsolla
Lead the overall strategic planning, technical roadmap, and architectural design for the company's global IAM system. Establish unified technical specifications, architecture standards, and implementation guidelines. Spearhead the zero-to-one construction of an enterprise-level unified IAM platform, or lead comprehensive architectural upgrades. Build, mentor, and manage the IAM R&D team; oversee task breakdown, technical reviews, talent development, and standardized workflows. Take full ownership of the project lifecycle from requirements to deployment, ensuring successful delivery. Tackle core technical challenges such as high concurrency, high availability, data consistency, fine-grained access control, federated identity, and multi-tenant isolation. Optimize RBAC/ABAC models, MFA, and automated governance based on Zero Trust principles. Author IAM architecture whitepapers and integration standards; collaborate with cross-functional teams. Autonomously draft technical documentation in English and collaborate seamlessly with global teams. Must possess core architecture/R&D experience in top-tier public cloud IAM platforms. Extensive experience in building large-scale IAM platforms from scratch (0-1), or leading architectural refactoring for tens of millions of users. 8+ years of experience in backend development, cloud-native, or network security architecture, with at least 5 years focused on enterprise-level IAM/IDaaS design. 3+ years of technical team management experience with quantifiable, successful delivery results. Fluent in English (both spoken and written) for technical communications and global team collaboration. Deep expertise in core IAM frameworks: account lifecycle management, SSO, federated identity, permission models (RBAC/ABAC/PBAC), principle of least privilege, access auditing, and privileged account management. Mastery of mainstream identity and security protocols (OAuth 2.0, OIDC, SAML, CAS, JWT), and strong familiarity with Zero Trust architecture, multi-tenant isolation, and fine-grained access control design. Proficiency in distributed, microservices, and cloud-native architectures, with strong expertise in designing high-concurrency and high-availability systems. Exceptional business acumen and architectural foresight, strong logic, excellent cross-departmental collaboration skills, and a results-oriented mindset focused on high-quality delivery.
