Senior IAM Architect (Team Lead)

Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators.

Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.

For more information, visit xsolla.com.

We are looking for a Senior IAM Architect (Team Lead) who is a visionary leader, highly analytical, and results-oriented to join our Core Engineering team. The best candidate will be someone who thrives in a fast-paced, highly collaborative, and exceptionally dynamic setting and is excited to lead the top-level architecture planning, build a comprehensive Identity and Access Management (IAM) system from scratch, and standardize technical frameworks to support our global business expansion.

Strong architectural design, high-concurrency system design, and technical leadership skills are essential, along with experience in backend development, cloud-native architecture, and enterprise-grade IAM/IDaaS platforms. The ability to drive complex technical problem-solving, oversee end-to-end project delivery, and seamlessly communicate in English with international teams will be key to your success in this role.

If you’re passionate about building highly scalable and secure access control systems and love safeguarding global platforms that empower game developers to monetize and distribute their games securely, we would love to hear from you!

• Top-level Architecture Design: Lead the overall strategic planning, technical roadmap, and architectural design for the company's global IAM system, covering account lifecycles, authentication, authorization, SSO, identity governance, risk control, and Privileged Access Management (PAM).
• Architecture Standardization: Establish unified technical specifications, architecture standards, and implementation guidelines to support complex business scenarios, including hybrid cloud, multi-business lines, and international expansion.
• Core System 0-1 Build & Refactoring: Spearhead the zero-to-one construction of an enterprise-level unified IAM platform, or lead the comprehensive architectural upgrade, refactoring, and security enhancement of existing legacy identity systems to resolve bottlenecks and compliance gaps.
• Team Management: Build, mentor, and manage the IAM R&D team; oversee task breakdown, technical reviews, talent development, and the implementation of standardized workflows.
• End-to-End Delivery: Take full ownership of the project lifecycle—from requirements and design to R&D, testing, deployment, and operations—ensuring 100% successful delivery, stable launches, and efficient iterations.
• Technical Problem Solving: Tackle core technical challenges such as high concurrency, high availability, data consistency, fine-grained access control, cross-domain access, federated identity, and multi-tenant isolation.
• Security & Optimization: Optimize RBAC/ABAC models, MFA, passwordless authentication, and automated governance capabilities based on Zero Trust principles, ensuring the platform complies with international security and data protection standards.
• Cross-Functional Enablement: Author IAM architecture whitepapers and integration standards; collaborate with business, security, frontend, and cloud teams to provide standardized identity solutions for internal systems, SaaS products, and overseas businesses.
• International Collaboration: Autonomously draft technical documentation in English, present technical solutions, and seamlessly collaborate with overseas teams on international requirements and technical discussions.

• Core Experience: Must possess core architecture/R&D experience in top-tier public cloud IAM platforms (e.g., Alibaba Cloud RAM, Volcengine IAM, Tencent Cloud CAM), with deep involvement in product iteration and architectural evolution.
• Proven Track Record: Extensive experience in building large-scale IAM platforms from scratch (0-1), or leading the comprehensive architectural refactoring of enterprise IAM systems for tens of millions of users, with the ability to independently deliver end-to-end solutions.
• Professional Background: 8+ years of experience in backend development, cloud-native, or network security architecture, with at least 5 years focused on enterprise-level IAM/IDaaS/4A identity governance platform design.
• Leadership Skills: 3+ years of technical team management experience, demonstrating strong capabilities in independent top-level architecture design, tackling complex technical challenges, and team leadership with quantifiable, successful delivery results (no failed projects or major live incidents).
• Language Proficiency: Fluent in English (both spoken and written), with the ability to independently conduct technical communications, author English technical specifications, and collaborate seamlessly with global teams without barriers.
• IAM Mastery: Deep expertise in core IAM frameworks, including account lifecycle management, SSO, federated identity, permission models (RBAC/ABAC/PBAC), principle of least privilege, access auditing, and privileged account management.
• Protocol & Security Expertise: Mastery of mainstream identity and security protocols (OAuth 2.0, OIDC, SAML, CAS, JWT), and strong familiarity with Zero Trust architecture, multi-tenant isolation, and fine-grained access control design.
• System Design: Proficiency in distributed, microservices, and cloud-native architectures, with strong expertise in designing high-concurrency and high-availability systems for large-scale B2B enterprise middle-office platforms.
• Soft Skills: Exceptional business acumen and architectural foresight, strong logic, excellent cross-departmental collaboration skills, and a results-oriented mindset focused on high-quality delivery.

• Experience building and delivering global identity middle-office or IDaaS platforms for top-tier internet companies, cloud vendors, or large enterprise groups.
• Previous experience delivering overseas IAM projects or building identity systems for international SaaS products.
• Familiarity with cutting-edge identity technologies such as Information Technology Application Innovation (Xinchuang), Zero Trust security, privacy computing, and passwordless authentication.
• Experience in building commercialized IAM products from scratch and empowering external customers with end-to-end implementation.

This job description is intended to outline the general nature and level of work currently performed and is not an exhaustive list of all duties, responsibilities, or qualifications required.

In accordance with the Personal Information Protection Law of the People's Republic of China (PIPL):

If your application proceeds past the final interview stage, we may conduct a background check, subject to applicable laws and regulations, only after obtaining your separate written consent. Any such check will be strictly limited to information directly relevant to the employment relationship (e.g., educational background, employment history) and will comply fully with the PIPL. Your personal information will be used solely for recruitment and human resource management purposes, and we will implement rigorous security measures to protect your data.

Xsolla takes your privacy rights seriously. We are committed to protecting your personal information in accordance with Chinese data protection laws and will not sell, unlawfully provide, or disclose any personal data received during the hiring process without your explicit authorization. As a data processor, we uphold our obligations to safeguard your personal data and respect your privacy.

For any inquiries related to data privacy, please contact: View email address on decentrajobs.com For more vacancies: Careers | Xsolla