Вакансии

Location: Bengaluru, India As a Tech Lead, you will guide a squad of engineers in delivering Java microservices on AWS, balancing hands-on technical contribution with team leadership responsibilities. You will own the quality and integrity of your squad's deliverables, drive implementation against architecture guidance, and ensure engineering standards are met on every release. You will work closely with the Technical Architect and Delivery Manager to plan, estimate, and ship working software on a predictable cadence. This position is intended for Hyderabad-based candidates who are available to work from the office. DataArt's team is assisting a client part of one of the largest investment management organizations in the world in migrating their existing services and applications to AWS, as well as developing new greenfield platforms. The engagement covers full-platform modernization: decomposing a monolithic Azure-based legacy system into cloud-native Java microservices and building new institutional client-facing solutions. By participating in this project, you will lead a delivery squad working at the core of a high-impact, large-scale migration. Design and implement Java microservices following DDD principles aggregate roots, bounded contexts, domain events published to the enterprise event bus. Implement CQRS read/write separation: Hibernate ORM write path, GraphQL composition and ORM-based REST GET DTOs for reads. Implement and maintain database schemas with Flyway migrations on Aurora PostgreSQL; ensure schema changes include corresponding history-table updates. Integrate AWS security patterns: RDS IAM database authentication, Secrets Manager, KMS at-rest encryption, TLS in-transit configuration. Implement authentication flows using Azure B2C and/or AWS Cognito (OIDC / JWT) for multiple user personas. Collaborate with cross-functional teams to define, design, and ship new features; translate architecture decisions into actionable engineering tasks. Own CI/CD pipeline health: GitHub Actions reusable workflows, semantic versioning, ECR push, EKS deployment, automated test gates. Identify and address performance bottlenecks, scalability issues, and bugs; lead root cause analysis on production incidents. Write clean, well-documented, maintainable code and ensure the squad does the same. Participate in sprint ceremonies under Agile SDLC; contribute to backlog refinement and estimation. Stay current with industry trends — including AI tooling — to keep the squad's approach modern and competitive. 10+ years of professional experience in Java development, with at least 3 years in a tech lead or senior lead role. Strong understanding of microservices architecture, DDD, and cloud-native design principles. Excellent knowledge of Java (21+), Micronaut or Spring Boot, Hibernate / JPA, MyBatis, Gradle, and Git. Hands-on experience with Aurora PostgreSQL or equivalent RDBMS: schema design, Flyway migrations, connection pooling (HikariCP). Experience with AWS platform services: EKS, RDS, IAM, Secrets Manager, ECR, CloudWatch. Familiarity with identity platforms: Azure B2C and/or AWS Cognito — OIDC/JWT flows and JWT validation in a Micronaut or Spring Security context. Experience with Docker containerization and Kubernetes / Helm deployments. CI/CD experience with GitHub Actions or equivalent; understanding of GitOps practices (Argo CD). Experience with OpenAPI/Swagger for contract-driven API development. Understanding of pub/sub and event-driven messaging (Kafka, AWS SNS/SQS, Azure Service Bus, or equivalent). Strong understanding of relational database design and query optimization. Experience with code quality tooling: linters, formatters, coverage gates in CI. Understanding of Agile SDLC, comfortable leading planning, refinement, and retrospective ceremonies. Team player with initiative and a results-oriented attitude; good sense for quality. Strong English communication skills; ability to bridge technical and product conversations. Excellent problem-solving skills and a proactive attitude. Experience in the finance or investment management industry AWS certification such as Developer or Solutions Architect Hands on experience with Terraform for AWS EKS, RDS, and IAM infrastructure Experience with Azure Service Bus and hybrid Azure to AWS event bridge patterns Experience with GraphQL schema design and DataLoader batching for N+1 prevention Experience with Kong API Gateway including route configuration and OIDC plugin integration Experience with the Micronaut GraphQL module Experience with Aurora PostgreSQL temporal and history table patterns

Задачи: — Оптимизировать производительность сайтов и устранять технические проблемы. — Много работы с легаси. — Внедрять ИИ-агентов для оптимизации рутинных задач и контроля качества. — Участвовать в подготовке релизов и контролировать качество перед публикацией и после на проде. — Взаимодействовать с bitrix-разработчиками и внутренним заказчиком (коллеги из смежных отделов). — Участвовать в обсуждении архитектурных решений и улучшении кодовой базы. — Выдвигать предложения по улучшению UI/UX. — Самостоятельно разбираться в технической документации проектов. Требования: — Опыт разработки веб-приложений от 3 лет. — Обязателен опыт работы с командами Bitrix-разработчиков. — Опыт работы в Git (gitlab). — Опыт использования ИИ-агентов. — Понимание принципов и технологии сборки проекта (npm, vite/rollup, webpack). — Опыт работы в Figma. — Опыт написания unit тестов. — Практические знания алгоритмов, структур данных, HTTP и DOM. — Навыки создания кроссбраузерной и адаптивной верстки. — Аналитическое мышление и способность работать в команде. — Хорошее понимание автотематики (желательно). — Будет плюсом: понимание механизмов кеширования, очередей задач и фоновых обработчиков (например, JWT, Redis, REST API). — Опыт с терминалом в Linux. — Понимание CI/CD процессов. — Техническое образование. Условия: — Удалённая работа. — Испытательный срок 2-3 месяца. — Оформление по ТК РФ. — Своевременная оплата труда. — Пятидневный рабочий график (пн-пт) с 08:00 до 16:30 (возможно согласовать другой график). — Профессиональный коллектив. — Медицинская страховка, оплачиваемый отпуск, бесплатное питание, абонемент в спортклуб. — Возможности для профессионального роста и участия в значимых проектах в автомобильной отрасли. Компания занимается инженерно-брендинговой деятельностью, является эксклюзивным представителем известных брендов, что открывает широкие перспективы для развития сотрудников.

Задачи: — задачи про архитектуру и нагрузку. Требования: — 4+ года на Python — уверенный Django и REST — PostgreSQL на уровне «понимаю, что происходит под капотом» — опыт с Docker и k8s — OAuth2, JWT, OWASP — Плюсом: FastAPI, CQRS, gRPC, Vault, GitLab CI/CD — Только резиденты РК Условия: — годовые бонусы по результатам работы — медстраховка — фитнес — обучение — возможность влиять на продукт

Location: Canada Workplace: remote About Xsolla Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. About the Role We're looking for a Staff Engineer to own the smart wallet and account abstraction layer of Xsolla's Web3 platform. This is an individual contributor role with outsized technical scope: you'll be the technical anchor for how millions of players get an on-chain account they never have to think about — setting direction, making hard architectural calls, and raising the bar across the org. Concretely, you'll own the account model behind Xsolla ZK, our zkSync-based L2, and the wallet that sits inside Xsolla App. Every player who signs in with Xsolla ID receives a deterministic, non-custodial smart account — derived from their identity claim, identical on every device, with private keys that never leave the client. That account is not a separate "wallet" screen: it is the player's inventory, and it backs minting, gifting, trading on our Bazaar marketplace, Merkle-based reward airdrops, gas sponsorship, and an in-app dApp browser that exposes the same signer to third-party applications through an EIP-1193 provider. You'll own the primitives underneath all of it: the ERC-4337 user operation lifecycle, EIP-7702 delegation, session keys and origin-bound Smart Sessions, paymaster and gas abstraction strategy, and the custody and recovery roadmap — including the move from raw key export to MPC custody. You will own the strategy behind account abstraction, signing, and session management at scale, and evolve our smart account and permissioning model to meet both product and compliance needs. You operate with significant autonomy, but your decisions ripple across teams — so you'll spend real time building buy-in with engineering, product, security, and legal stakeholders, not just designing in isolation. You are technically deep, calm under pressure, and comfortable being the escalation point when production wallet issues get hard — because in this domain, "hard" means a stuck user operation, a drained paymaster, or a signing prompt a player didn't understand. You write the RFCs and design docs that people actually read, and you create leverage for the broader engineering org through documentation, tooling, and mentorship — without needing a management title to do it. Responsibilities Own Smart Wallet & AA Architecture — Own the technical strategy and architecture of our smart wallet platform, covering the account model, signing, session management, and gas abstraction at scale. Design the Account & Signing Model — Design and evolve our ERC-4337 user operation lifecycle (prepare → sign → submit → confirm), EIP-7702 delegation, deterministic address derivation from identity, and the session-key and permission primitives that let players act without a prompt on every transaction. Own Gas Abstraction — Set the paymaster and gas-sponsorship strategy: what we sponsor, how we meter and cap it, how we defend it from abuse, and how it degrades when sponsorship is unavailable. Harden the dApp-Facing Surface — Own the security model where our signer meets third-party applications: EIP-1193 / EIP-6963 provider behavior, origin-bound and policy-versioned sessions, trust tiers, and the transaction and signature confirmation flow. Define what a player is actually approving, and make sure the UI can prove it. Drive Custody & Recovery — Lead the custody roadmap from today's interim mechanisms toward MPC-based custody, and design recovery paths (passkeys, guardians, social recovery) that a non-crypto-native player can complete without losing assets. Drive Cross-Team Technical Decisions — Drive decisions on account architecture, SDK contracts, data modeling, and platform reliability, and build buy-in across the wallet, marketplace, SDK, mobile, and security teams. De-Risk Proactively — Identify systemic risks — key management, signature phishing, reorgs and indexer staleness, bundler and RPC dependencies, contract upgrade paths — and lead initiatives to resolve them before they become incidents. Set Engineering Standards — Define engineering standards, review critical code, contracts, and designs, and create leverage for the team through documentation, tooling, and mentorship. Align with Stakeholders — Collaborate with product, security, legal, and infra teams to align on roadmap and translate business and regulatory needs into well-scoped technical plans. Own Production Escalations — Serve as the go-to escalation point for complex production issues in the wallet and account abstraction domain. What You Bring Account Abstraction & Smart Wallets ERC-4337 Depth — Deep, hands-on understanding of ERC-4337: EntryPoint (v0.6 through v0.8), the UserOperation lifecycle, bundler and paymaster roles, validation rules (ERC-7562), gas estimation and its failure modes, counterfactual deployment, and signature validation for undeployed accounts (ERC-6492). EIP-7702 & the Post-Pectra Landscape — Working knowledge of EOA delegation, its interaction with ERC-4337 EntryPoint v0.8, and the trade-offs and risks it introduces (residual key authority, delegation phishing, storage collisions). Smart Account Implementations — Experience building on or extending production smart account implementations (Safe, Kernel, Biconomy, Coinbase Smart Wallet, or equivalent), and familiarity with modular account standards (ERC-7579 / ERC-6900). Session Keys & Delegated Permissions — Experience designing scoped, time-limited, policy-bound authority: session keys with TTL and contract allowlists, origin binding, permission revocation, and delegated-permission standards (ERC-7710 / ERC-7715). Signature Schemes & Wallet Interfaces — Practical command of EIP-712 typed data, ERC-1271 contract signatures, WebAuthn / passkey (P-256) signers, and the wallet-facing standards: EIP-1193, EIP-6963, EIP-5792 batched calls, ERC-7677 paymaster interfaces. Production Wallet Experience — Experience designing or operating a production smart wallet or account abstraction system serving real users and real value. Production Crypto Track Record Scale in a Major Crypto Organization — Substantial engineering experience at a large crypto product or protocol organization — for example Coinbase, Kraken, Base, Safe, the Ethereum Foundation, Consensys / MetaMask — or a comparable wallet, exchange, or account-abstraction infrastructure team where wallet correctness and custody were core to the product. Operational Judgment Under Value at Risk — You have shipped and operated systems where a bug meant lost funds, and you can talk concretely about the guardrails, reviews, and rollback paths you put in place. Smart Contracts & EVM Solidity & EVM Fluency — Ability to read, review, and write account, paymaster, and module contracts; gas-aware design; upgradeability and migration patterns; working effectively with external auditors. L2 Specifics — Understanding of L2 execution differences and how they affect wallet design: native account abstraction on zkSync-family chains, transaction and fee models, finality and reorg behavior, and RPC and indexer semantics. Backend Engineering Go Engineering — Strong Go (Golang) engineering skills: idiomatic code, concurrency patterns, performance profiling. TypeScript & SDK Design — Ability to design and own client-side SDK surfaces in TypeScript that other engineering teams — internal and external — build on top of. Distributed Systems — Experience with distributed systems and their trade-offs (consistency, availability, failure modes), and with reconciling off-chain state against an authoritative on-chain result. Data & Infrastructure PostgreSQL — Schema design, query optimization, migrations at scale. Kubernetes — Deploying, operating, and debugging services in a k8s environment. Message Streaming — Kafka or NATS — event-driven patterns, consumer groups, at-least-once delivery. Git & CI/CD — Git and modern CI/CD practices. Security Key Management — Hands-on experience with key material in production: platform secure storage (Keychain / Keystore), HSMs, MPC or threshold signing, and the operational discipline around each. Wallet Threat Modeling — Solid grasp of the wallet attack surface: signature and delegation phishing, malicious dApp origins, replay and cross-chain replay, token approval abuse, and paymaster griefing and DoS. Leadership Cross-Team Initiative Leadership — Proven ability to lead multi-quarter technical initiatives across teams. Architectural Influence — Track record of influencing architecture and standards beyond your immediate team. Written & Verbal Communication — You write RFCs and design docs that people actually read. Nice to Have Experience working in the video game industry, building or operating platforms for game developers, publishers, or players Hands-on experience with the zkSync / Elastic Chain ecosystem (ZKsync OS, Matter Labs stack, native AA and paymaster flows, custom L2 operations) Experience with embedded and ecosystem wallet providers or AA infrastructure vendors (thirdweb, Privy, Dynamic, Turnkey, Pimlico, Alchemy, Biconomy, ZeroDev, Safe{Core}) — and clear views on where to build versus buy Experience with MPC / threshold custody, social recovery, or guardian-based recovery in a consumer product Experience with NFT and token infrastructure at scale: ERC-721 / ERC-1155 / ERC-20 mechanics, marketplace contracts, Merkle-based airdrop and claim distribution, chain indexing services Contributions to open-source wallet, security, or identity projects — including authorship or review of ERC / EIP standards Familiarity with compliance requirements relevant to crypto consumer products: KYC / AML, geofencing, MiCA, SOC 2, ISO 27001, GDPR data minimization, audit logging Experience with identity and auth integration for wallet derivation (OAuth 2.0 / OIDC, JWT verification, token scoping) Background in platform or infrastructure engineering — building systems other engineers build on top of Experience owning a mobile wallet surface (React Native / Expo, WebView provider injection, native signing UI) Hands-on, up-to-date experience with modern AI tools (e.g. Claude, Copilot, Cursor) for code generation, review, and accelerating day-to-day engineering work How We Work Xsolla operates across multiple time zones, and the smart wallet underpins identity, ownership, and value transfer for every Web3 product we ship. Strong written communication is essential — your architectural decisions and designs need to stand on their own and be actionable without you in the room. We value directness, technical depth, and follow-through. In this domain that means saying plainly when a design has custody, security, or reversibility implications, defending your position with evidence, and staying engaged until it's resolved. Where a decision touches player funds or key material, we expect the conservative call to be argued for explicitly rather than assumed. Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play.

Обязанности: — Разработка и поддержка административного портала на React/TypeScript: приложения, роли и доступы, секреты, пространства, ресурсы, репозитории и базовые образы, модели, мониторинг и отчёты; — Разработка и доработка REST API на Python/FastAPI в сервисах портала, шаблонизатора и нотификаций: эндпоинты, схемы Pydantic, сервисный слой, доступ к PostgreSQL; — Ведение фичи целиком: контракт OpenAPI, реализация на бэкенде, генерация клиента, экран и проверка прав; — Ролевая модель на фронте и авторизация на бэкенде; — Интеграции с GitLab, Vault, Airflow, Superset и смежными сервисами платформы; — Контейнеризация своих сервисов и участие в выкладке в Kubernetes через существующие CI/CD-пайплайны; — Тесты: pytest на API, Vitest и e2e на интерфейс. Требования: — Опыт коммерческой разработки и на TypeScript/React, и на Python — от 4 лет суммарно, из них не меньше двух лет на каждом стеке; — React 18: многостраничное приложение, роутинг, формы, таблицы, разграничение экранов по ролям; — Уверенный TypeScript; — Работа с REST и OpenAPI: проектирование контракта и использование сгенерированного клиента; — Python и FastAPI: асинхронные эндпоинты, Pydantic, структура роутер — сервис — репозиторий; — PostgreSQL, SQLAlchemy, миграции Alembic; — Аутентификация и авторизация: OAuth/OIDC, Keycloak, JWT; — Docker и понимание, как сервис живёт в Kubernetes; — Git и код-ревью; — умение самому довести задачу от API до интерфейса. Условия: — Работу в аккредитованной IT-компании; — Оформление по срочному ТД; — Гибкое начало рабочего дня: с 08:00 до 11:00 (по МСК); — ДМС со стоматологией, телемедициной и полисом ВЗР; — Возможность взять больничный без больничного: 7 дней в году; — Поэтапную адаптацию от hr и линейного руководителя; — Ревью и развитие: оцениваем результаты, обсуждаем карьерные цели и выстраиваем индивидуальный план развития; — IT-конференции, курсы, тренинги и сертификации за счет компании; — Корпоративный английский; — Развитие личного бренда: готовим спикеров к выступлениям на конференциях, помогаем в написании статей; — Внутренние митапы, онлайн/офлайн активности (квизы, вечера настольных игр, спортивные мероприятия).

Задачи: — Разработка fullstack приложений с использованием технологий Html, Css, Javascript, Typescript, React Js, Redux, Zustand, Tanstack Query, Tailwind Css, Postgresql, Rest Api, Jwt, Redis, Docker, Nest Js, Express Js, Typeorm, Prisma, Zod, Node Js, Rabbit Mq, Python, Fastapi, Django. — Разработка мобильных приложений на Flutter. — Тестирование приложений (Qa Tester). Требования: — Опыт работы не менее 2 лет. — Умение работать fullstack разработчиком. — Навыки работы с QA и Flutter Mobile. — Понимание сложных систем и интеграций. — Возраст не имеет значения. Условия: — Место работы: Ташкент. — Рабочее время: 10:00-20:00. — Зарплата: 100$-300$ в месяц. — Начальный период: 2 недели стажировки. — Ответственность высокая.

Location: Belgrade, Serbia; Bengaluru, India; Cluj-Napoca, Romania; Krakow, Poland; Larnaca, Cyprus; Lodz, Poland; Lublin, Poland; Monterrey, Mexico; Montevideo, Uruguay; Remote.AR, Remote.LATAM-country; Remote.BR, Brazil; Remote.BG, Bulgaria; Remote.CO, Colombia; Remote.GE, Georgia; Remote.PL, Poland; Riga, Latvia; Rosario, Remote.LATAM-country; Sofia, Bulgaria; Tbilisi, Georgia; Varna, Bulgaria; Warsaw, Poland; Wroclaw, Poland; Yerevan, Armenia We are looking for a Solution Architect to own the solution architecture of Java services across Studio and Mosaic. The architect sets service boundaries, API and event contracts, persistence, identity, and integration patterns for authoring, governance, transformation, packaging, and delivery and stays close enough to the code to make those designs real in Micronaut services. Own solution architecture for Java services across authoring, governance, transformation, packaging, and delivery Define service boundaries and contracts for Studio and Mosaic, including assembler, resolver, LMS integration, content delivery, identity, and progress / learning-record services Design a canonical content model for modular lessons, topics, assessments, and media, and keep it stable across Java APIs and React experiences Define taxonomy and ontology services exposed through APIs so classification stays consistent across authoring, search, and delivery Architect workflows for approvals, versioning, quality gates, lineage, and audit trails Design standards-based transformation and packaging across XML, JSON, BITS, QTI, XLIFF, SCORM, xAPI, LTI, PDF, and ePub Lead integration architecture across the component CMS, taxonomy, translation management, search, publishing, and learner channels (including Canvas and Brightspace) Define AI-assisted drafting, tagging, enrichment, semantic search, and recommendation patterns, including how Java services call and govern those capabilities Establish human review checkpoints, attribution, prompt and model versioning, and traceability of AI-generated content Design identity and entitlement integration: Entra ID workforce SSO, Kong as the backend-for-frontend, JWT validation in Java services, LTI 1.3 learner federation, roles, paywalls, and secure access to published content Shape AWS runtime architecture for these services: Aurora PostgreSQL, S3 and CloudFront delivery, secrets, and container deployment Ensure end-to-end observability across authoring, classification, approval, transformation, delivery, and AI actions (OpenTelemetry, metrics, and correlated logs) Set engineering standards for OpenAPI, persistence (JPA and schema migrations), error semantics, and testability of the Java services 8+ years in solution, content, information, or enterprise architecture, with a substantial record of shipping Java services Production experience with modern Java (21+) service frameworks (Micronaut or Spring), Gradle or Maven, REST, and OpenAPI Experience with taxonomy and ontology platforms exposed through APIs Experience with translation workflows, translation memory, glossaries, and XLIFF exchange Knowledge of search and discovery architecture, including semantic search and recommendations Experience with publishing and transformation pipelines Familiarity with learning delivery standards and channels such as LTI 1.3, SCORM, xAPI, Canvas, and Brightspace Experience with API, event, workflow, and file-ingest architectures Strong cloud architecture experience on AWS (relational data, object storage, CDN, secrets, container platforms) Experience with gateway and session architecture, identity integration (OIDC/JWT, SSO, federation), and secure access patterns Familiarity with application stacks such as React front ends consuming Java services Experience integrating structured editors such as CKEditor with content models Experience with logical architecture across presentation, capability, content, integration, and infrastructure layers Hands-on Micronaut, Flyway, and PostgreSQL / Aurora Experience with Kong (or a similar API gateway) as a backend-for-frontend in front of Java APIs Experience with structured component CMS platforms and component-level content models Experience migrating legacy long-form content into modular reusable components Familiarity with xAPI learning-record stores and content analytics Knowledge of semantic standards such as SKOS or RDF Knowledge of content standards such as BITS and QTI Experience governing a canonical model across multiple vendor platforms Experience with OpenTelemetry and Prometheus-style metrics on JVM services

Задачи: — Разработка и развитие клиентской части продукта на React — от архитектуры и управления состоянием до production-ready UI с реальными пользователями. — Проектирование масштабируемой frontend-архитектуры, выбор технологических решений и формирование стандартов разработки. — Интеграция с backend REST API, участие в проектировании контрактов взаимодействия (OpenAPI/Swagger). — Оптимизация производительности приложения, управление техническим долгом, рефакторинг сложных участков кода. — Участие в code review, менторство разработчиков, развитие инженерных практик команды. — Взаимодействие с product-менеджерами, дизайнерами и backend-разработчиками на всех этапах разработки. — Участие в декомпозиции задач, технической оценке и планировании спринтов. Требования: — Глубокое знание React (18+) и его экосистемы: хуки, контекст, жизненный цикл компонентов, механизмы ререндеринга и оптимизации (мемоизация, виртуализация). — Уверенное владение TypeScript (generics, utility types, типизация сложных структур). — Опыт работы с state-менеджерами: Redux Toolkit, Zustand, React Query, TanStack Query; понимание разделения server-state и client-state. — Понимание принципов работы REST API, авторизации (JWT), обработки ошибок, идемпотентности (для платежных сценариев). — Опыт работы с CI/CD, Git, системами сборки (Webpack, Vite). — Понимание принципов чистого кода, SOLID, паттернов проектирования. — Знание методологий гибкой разработки (Scrum, Kanban). — Опыт коммерческой разработки на React от 5 лет, из них не менее 2 лет в роли Senior. — Опыт проектирования архитектуры SPA-приложений высокой сложности (множество зависимостей, ролей и сценариев). — Навыки адаптивной, кроссбраузерной и мобильной вёрстки (HTML5, CSS3, SCSS). — Умение работать с дизайн-системами, коллекциями компонентов (Untitled UI React, shadcn/ui), опыт ведения UI-kit в Storybook. — Опыт написания тестов (Jest, Vitest, React Testing Library). — Навыки проведения code review и менторства. — Системное мышление, умение упрощать сложные системы, критическое мышление. Будет плюсом: — Опыт работы в финтехе или highload-проектах. — Наличие портфолио / ссылок на GitHub или участие в open-source проектах. Условия: — Полностью удаленный формат работы. — Встречи и корпоративные мероприятия в офисе Москва/Вологда. — Окладная часть + KPI. — Возможность влиять на архитектуру и выбирать технологии. — Работа в сильной команде, поддержка профессионального роста. — Интересные задачи в быстрорастущем проекте.

Location: Russia; Moscow; Perm Workplace: remote About Xsolla Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. About the Role We are hiring a Staff Software Engineer to own the smart wallet and account abstraction layer of XsollaZK, Xsolla's Web3 platform on a zkSync-based L2. This is an individual contributor role with a large technical scope. You are the technical anchor for how millions of players get an on-chain account they never have to think about. The product. Every player who signs in with Xsolla ID receives a deterministic, non-custodial smart account. The account is derived from their identity claim, is identical on every device, and its private keys never leave the client. It is not a separate wallet screen: it is the player's inventory. It backs: minting and gifting; trading on our Bazaar marketplace; Merkle-based reward airdrops; gas sponsorship; an in-app dApp browser that exposes the same signer to third-party applications through an EIP-1193 provider. Responsibilities The technical strategy and architecture of the smart wallet platform: account model, signing, session management and gas abstraction at scale The smart account and permissioning model, evolved to meet both product and compliance needs The security model where our signer meets third-party applications: what a player is actually approving, and proof that the UI shows it The custody and recovery roadmap, from today's interim mechanisms (including raw key export) to MPC -based custody Cross-team technical decisions on account architecture, SDK contracts, data modeling and platform reliability, with buy-in from the wallet, marketplace, SDK, mobile and security teams Engineering standards in the Web3 domain Production escalations in the wallet and account abstraction domain WHAT YOU WILL DO Design and evolve the ERC -4337 user operation lifecycle (prepare → sign → submit → confirm), EIP -7702 delegation, deterministic address derivation from identity, and the session-key and permission primitives (including origin-bound Smart Sessions) that let players act without a prompt on every transaction Set the paymaster and gas-sponsorship strategy: what we sponsor, how we meter and cap it, how we defend it from abuse, and how it degrades when sponsorship is unavailable Define EIP -1193 / EIP -6963 provider behavior, origin-bound and policy-versioned sessions, trust tiers, and the transaction and signature confirmation flow Design recovery paths (passkeys, guardians, social recovery) that a non-crypto-native player can complete without losing assets Identify systemic risks (key management, signature phishing, reorgs and indexer staleness, bundler and RPC dependencies, contract upgrade paths) and lead initiatives that resolve them before they become incidents Write RFCs and design docs; review critical code, contracts and designs Work with product, security, legal and infra teams to align on the roadmap and turn business and regulatory needs into well-scoped technical plans Create leverage for the engineering org through documentation, tooling and mentorship Serve as the escalation point for complex production issues: a stuck user operation, a drained paymaster, a signing prompt a player didn't understand Set up and maintain AI tooling in the repositories (Claude Code, Codex, Cursor: rules, context, harness) so the team uses it effectively REQUIRED Experience 8+ years of engineering in the Ethereum ecosystem working with crypto wallets and smart wallets Designing or operating a production smart wallet or account abstraction system serving real users and real value Shipping and operating systems where a bug meant lost funds. You can talk concretely about the guardrails, reviews and rollback paths you put in place Account abstraction and smart wallets ERC -4337 in depth: EntryPoint (v0.6 through v0.8), the UserOperation lifecycle, bundler and paymaster roles, validation rules ( ERC -7562), gas estimation and its failure modes, counterfactual deployment, signature validation for undeployed accounts ( ERC -6492) EIP -7702 and the post-Pectra landscape: EOA delegation, its interaction with EntryPoint v0.8, and the risks it introduces (residual key authority, delegation phishing, storage collisions) Building on or extending production smart account implementations; modular account standards ( ERC -7579 / ERC -6900) Session keys and delegated permissions: scoped, time-limited, policy-bound authority; TTLs and contract allowlists, origin binding, permission revocation; ERC -7710 / ERC -7715 Signature schemes and wallet interfaces: EIP -712 typed data, ERC -1271 contract signatures, WebAuthn / passkey (P-256) signers; EIP -1193, EIP -6963, EIP -5792 batched calls, ERC -7677 paymaster interfaces Smart contracts and EVM Solidity and the EVM : reading, reviewing and writing account, paymaster and module contracts; gas-aware design; upgradeability and migration patterns; working effectively with external auditors L2 specifics and their effect on wallet design: native account abstraction on zkSync-family chains, transaction and fee models, finality and reorg behavior, RPC and indexer semantics Backend Go: idiomatic code, concurrency patterns, performance profiling TypeScript and SDK design: client-side SDK surfaces that internal and external teams build on Distributed systems and their trade-offs (consistency, availability, failure modes); reconciling off-chain state against an authoritative on-chain result Data and infrastructure PostgreSQL: schema design, query optimization, migrations at scale Kubernetes: deploying, operating and debugging services Asynchronous messaging and event-driven design (Kafka or NATS ): consumer groups, at-least-once delivery Git, CI/CD Security Key management in production: platform secure storage (Keychain / Keystore), HSMs, MPC or threshold signing, and the operational discipline around each Wallet threat modeling: signature and delegation phishing, malicious dApp origins, replay and cross-chain replay, token approval abuse, paymaster griefing and DoS Leadership Leading multi-quarter technical initiatives across teams Influencing architecture and standards beyond your immediate team RFCs and design docs that stand on their own and are actionable without you in the room AI-assisted engineering Daily hands-on use of AI coding tools (Claude Code, Codex, Cursor) for development and review, including configuring them for a repository English English at C1 level Nice to Have Hands-on experience with ZK Stack and zk -rollups Hands-on experience with embedded and ecosystem wallet and AA infrastructure technologies (thirdweb, Privy, Dynamic, Turnkey, Pimlico, Alchemy, Biconomy, ZeroDev, Safe{Core}), with clear views on build versus buy MPC / threshold custody, social recovery or guardian-based recovery in a consumer product NFT and token infrastructure at scale: ERC -721 / ERC -1155 / ERC -20 mechanics, marketplace contracts, Merkle-based airdrop and claim distribution, chain indexing services Contributions to open-source wallet, security or identity projects, including authoring or reviewing ERC / EIP standards Compliance requirements for crypto consumer products: KYC / AML , geofencing, MiCA , SOC 2, ISO 27001, GDPR data minimization, audit logging Identity and auth integration for wallet derivation: OAuth 2.0 / OIDC , JWT verification, token scoping Platform or infrastructure engineering: building systems other engineers build on Owning a mobile wallet surface: React Native / Expo, WebView provider injection, native signing UI Gaming industry experience: platforms for game developers, publishers or players How We Work Decisions in writing. Significant technical decisions are written up as an RFC or ADR that lays out the options and trade-offs. We work across time zones, so a design has to stand on its own. AI is part of everyday engineering. We use AI coding tools for development and review, and we treat configuring them for a codebase as real engineering work. HOW WE HIRE Intro call. Your background, your motivation and the role. Technical interview. Built directly on the What you will own and Required sections above. We won't ask about anything this posting doesn't promise. System design. You design part of a wallet or account abstraction platform end to end and walk us through the trade-offs. Bar raiser. An engineer from outside the hiring team checks that you raise the overall engineering bar. Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play. EMPLOYMENT DETAILS Location: Remote  Employment Type: Full-time Schedule: 10:00–19:00 (flexible)

Location: Baku Workplace: onsite ABOUT YOU You will play a pivotal role in delivering high-impact software solutions across our platform. You bring curiosity, initiative, and a passion for clean, scalable systems. You collaborate effectively with teammates and cross-functional partners to design, build, and improve our technical stack. You’re hands-on, deeply engaged in the code, and consistently seeking better ways to solve complex engineering challenges.   ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.   For more information, visit xsolla.com. WHAT YOU'LL DO Software Engineering & Problem Solving: Build and ship reliable, secure, and scalable backend systems. Own implementation from design to deployment, ensuring maintainability and performance. Participate in architectural discussions and offer informed technical input. Refactor legacy codebases to improve structure and efficiency while maintaining feature continuity. Drive production readiness by handling incident response, root cause analysis, and observability improvements. Technical Excellence: Write clear, testable, and well-documented code, emphasizing quality and automation. Contribute to a culture of engineering excellence through code reviews and design discussions. Advocate for sound software development practices and continuous improvement. Collaboration & Impact: Work closely with product managers, designers, and other engineers to align on objectives and deliverables. Contribute to technical scoping and estimation for features and infrastructure work. Identify opportunities to reduce technical debt and improve the developer experience. QUALIFICATIONS 6+ years of professional experience in software engineering. 2+ years of hands-on experience with Go (Golang ) in production environments. Strong experience working with PostgreSQL and/or MySQL. Proficient with containerization and orchestration tools: Docker, Kubernetes (K8s), and Helm. Familiarity with messaging systems like RabbitMQ or Kafka. Comfortable using Git and CI/CD tooling in collaborative workflows. Working knowledge of frontend technologies, especially React and/or Next.js . Basic understanding of cloud platforms (GCP preferred). WHAT SETS YOU ARART Experience building scalable, secure Login-as-a-Service platforms. Deep knowledge of OAuth2, OIDC, SAML, JWT, and session/token management. Strong grasp of social login, SSO, and federated identity. Designed multi-tenant identity systems with isolation and configurability. Delivered developer-friendly APIs, SDKs, and integration documentation. Strong English communicator, for both technical and non-technical topics. The duties and responsibilities of this position may evolve over time to support the organization’s goals and individual growth. This job description is intended to outline the general nature and level of work being performed and is not intended to be an exhaustive list of all duties, responsibilities, and qualifications required. By submitting your application, you consent to Xsolla conducting background checks, where permitted by law, after the final interview stage. All checks will comply with local regulations, and your information will be handled confidentially. Xsolla takes your privacy seriously and will not sell or externally distribute any personal data received during the hiring process. In accordance with applicable data protection laws, Xsolla is committed to protecting your personal information and respecting your privacy. For any inquiries related to data privacy, please contact: careers@xsolla.com Explore more opportunities at: https://xsolla.com/careers

Задачи: — Развивать архитектуру модульного backend-приложения, REST API и бизнес-логику, включая валидацию, обработку ошибок и документацию; — Проектировать модели данных и миграции, оптимизировать запросы и кеширование; — Развивать аутентификацию, авторизацию и ролевую модель; — Контролировать доступ к внешним данным и управлять подключениями; — Программно управлять контейнерными средами: от создания и ожидания готовности до обработки сбоев и освобождения ресурсов; — Развивать AI-функции: потоковые диалоги, хранение истории, сокращение контекста, агентные инструменты и RAG — от подготовки данных до использования найденного контекста в ответах; — Обеспечивать проверку прав, согласованность состояния и обработку ошибок при выполнении удалённых операций и вызовах инструментов; — Писать тесты, диагностировать production-проблемы, развивать наблюдаемость, согласовывать API с frontend-разработчиками. Требования: — Уверенное владение Java, опыт production-разработки на Spring Boot и готовность работать с Java 21 и Spring Boot 3.5; — Опыт проектирования архитектуры и REST API, самостоятельного принятия технических решений и развития существующей кодовой базы; — Знание Spring MVC, Spring Security, Spring Data JPA/Hibernate, валидации запросов и документирования API через OpenAPI; — Практический опыт PostgreSQL, SQL и Liquibase; — Понимание транзакций, индексов, оптимизации запросов, кеширования и пулов подключений; — Опыт подключения внешних реляционных источников, включая MS SQL Server, и разграничения доступа к данным; — Опыт реализации аутентификации и авторизации с JWT, OAuth2 и OIDC/SSO; — Владение Maven и Git; — Опыт OpenFeign для HTTP-интеграций, JGit для работы с репозиториями, MapStruct для преобразования объектов и Ehcache для кеширования; — Практический опыт Docker и программного управления контейнерами через docker-java; — Знание Docker Compose, Docker Swarm, Traefik и GitLab CI на уровне настройки окружения, понимания сборки и развёртывания, диагностики проблем; — Практический опыт LLM API и LangChain4j: потоковые ответы через SSE, история диалогов и управление контекстом; — Опыт построения RAG, работы с эмбеддингами и векторным поиском в Qdrant; — Опыт агентных сценариев, вызова инструментов и MCP-интеграций с проверкой прав и обработкой ошибок; — Опыт модульного и интеграционного тестирования с JUnit и Testcontainers, включая проверки с базами данных; — Навыки диагностики по логам, метрикам и трассировкам с использованием Actuator, Micrometer, OpenTelemetry и OTLP; — Понимание трассировки AI-вызовов; — Понимание React и TypeScript на уровне согласования API-контрактов и совместной диагностики frontend/backend; — Понимание специфики корпоративного ПО для внешних заказчиков: ролевой модели и безопасности, интеграций с их ИТ-ландшафтом, требований к надёжности и влияния изменений на процессы пользователей. Что важно: — Уметь общаться с бизнес-заказчиками, выявлять реальную потребность за первоначальным запросом, уточнять требования, объяснять варианты решения и переводить бизнес-задачи в техническую реализацию; — Готовность работать итерационно: сформулировать гипотезу, обсудить ее, проверить, скорректировать и двигаться дальше; — Самостоятельно прорабатывать задачи, проверять гипотезы и учитывать обратную связь; — Декомпозировать работу, оценивать сроки, согласовывать приоритеты и своевременно сообщать о рисках и необходимости помощи; — Отвечать за результат до эксплуатации, учитывать пограничные сценарии и последствия изменений; — Аргументировать решения, слышать коллег, конструктивно давать и принимать обратную связь; — Проводить code review, делиться знаниями и помогать другим разработчикам; — Находить баланс между пользой для пользователя, качеством, сложностью реализации, техническим долгом и сроками. Условия: — Работа над корпоративным продуктом, объединяющим backend, интеграции, контейнерные среды и AI; — Развитие экспертизы в AI-инженерии и агентных системах; — Оформление по ТК РФ, после испытательного срока подключение к ДМС, компенсация спортивных программ; — Работа в аккредитованной IT-компании (льготы IT ипотеки, отсрочки); — Возможность работы в одном из офисов или удаленно, преимущественно по желанию сотрудника; — График работы 5/2, гибкое начало рабочего дня, отсутствие дресс-кодов и только полезная бюрократия; — Интересные корпоративные мероприятия, клубы по интересам; — Система профессионального, карьерного и финансового развития.

Задачи: — Проектирование системы, выбор архитектуры — Создание основных сущностей, моделей, БД API — Создание интерфейса ГИС — Создание редактора ГИС — Создание системы генерации отчетов (листов) с возможностью редактирования карты Требования: — Высшее образование — Знание языков программирования: Node.js (NestJS, Express) или C# (.NET Core / ASP.NET) — Работа с базами данных и хранением данных — Обязательное знание PostgreSQL — Умение писать сложные JOIN-запросы, оконные функции, понимание транзакций и уровней изоляции — NoSQL: MongoDB, Redis (кэширование в памяти) — Понимание принципов (ресурсы, методы GET/POST/PUT/DELETE, статусы HTTP, версионирование) — Аутентификация и Авторизация: JWT, OAuth 2.0/OpenID Connect, сессии (Cookie/Session) — Работа с протоколами: HTTP/HTTPS, WebSockets, gRPC — Контейнеризация — Опыт работы с очередями сообщений — CI/CD: Понимание пайплайнов (GitHub Actions, GitLab CI, Jenkins) — Документирование: Swagger/OpenAPI, спецификацию к API

Задачи: — Развивать серверную часть на C# / .NET 8: ASP.NET Core Web API, доменные сервисы, объектная модель — Проектировать и поддерживать REST API, интеграции и сценарии работы с документами (WebDAV, онлайн-редактирование) — Работать с MS SQL и PostgreSQL: запросы, скрипты, миграции, оптимизация производительности — Поддерживать инфраструктурную обвязку: кэш (Redis), полнотекстовый поиск (Elasticsearch), real-time (SignalR), логирование — Собирать и разворачивать приложение в Docker (multi-stage, nginx), в том числе под Astra Linux и офлайн-контур с приватным репозиторием пакетов — Делать код-ревью и отвечать за выпуск релизов — от локального запуска до работающего релиза Требования: — Коммерческий опыт разработки на .NET / C# от 5 лет — Уверенное владение .NET 8 и ASP.NET Core Web API — Опыт работы с Docker от 3 лет: multi-stage сборки, docker compose, отладка и запуск сервисов в контейнерах — Хороший SQL и практика с MS SQL и/или PostgreSQL: планы запросов, скрипты, оптимизация — Знание DI/IoC-контейнеров, асинхронности, структурного логирования, Swagger/OpenAPI — Понимание аутентификации и безопасности: JWT, Kerberos/NTLM, LDAP / Active Directory — Умение работать самостоятельно в удалённом формате и держать прозрачную коммуникацию Условия: — Удалённая работа.

Requirements: — 3+ years of experience with Go — Strong understanding of Go concurrency, context, profiling — Experience designing RESTful APIs — Experience with SQL and NoSQL databases — Experience with JWT & RBAC — Experience with Docker & CI/CD — Experience with Message broker (NATS, RabbitMQ, Kafka) — Experience with Monitoring & Logging tools — Clean, maintainable code mindset Nice to have: — Scrum / Agile — AI tools — Distributed systems We offer: — High salary; — Career growth opportunity; — Bonuses; — Office conditions;

Задачи: — Разрабатывать архитектуру управления сервисными учетными записями, используемыми информационными системами, приложениями, микросервисами и интеграционными решениями; — Формировать подходы к регистрации, идентификации и учету сервисов внутри организации; — Проектировать процессы жизненного цикла сервисных учетных записей и машинных идентичностей; — Разрабатывать архитектуру безопасного межсервисного взаимодействия; — Определять требования к аутентификации, авторизации и управлению доверием между сервисами; — Формировать требования к управлению сертификатами, ключами, токенами и другими учетными данными сервисов; — Определять подходы к ротации, отзыву и контролю использования сервисных учетных данных; — Разрабатывать архитектурные решения по аудиту и расследованию действий, выполняемых сервисами; — Формировать интеграционную архитектуру взаимодействия с PKI, секрет-хранилищами, API-шлюзами, платформами контейнеризации и средствами мониторинга; — Участвовать в разработке нормативной базы, принципов и стандартов безопасного взаимодействия информационных систем. Требования: — Опыт работы системным архитектором не менее 5 лет; — Опыт проектирования крупных корпоративных платформ безопасности, IAM или интеграционных решений; — Глубокое понимание принципов аутентификации и авторизации сервисов; — Практический опыт проектирования решений на базе OAuth 2.0, OpenID Connect, mTLS, JWT, PKI; — Понимание принципов управления машинными идентичностями (Machine Identity Management); — Опыт проектирования решений по управлению сертификатами, ключами и секретами; — Понимание современных подходов к защите API и межсервисных взаимодействий; — Знание архитектур микросервисных платформ и контейнерных сред; — Опыт работы с Kubernetes будет преимуществом; — Опыт работы с Service Mesh будет преимуществом; — Опыт построения решений класса Zero Trust будет преимуществом.

Location: Remote; Seattle, WA; London; New York, NY; San Francisco, CA Workplace: Remote We are building AI to simulate the world through merging art and science. We believe that world models are at the frontier of progress in artificial intelligence. Language models alone won’t solve the world’s hardest problems – robotics, disease, scientific discovery. Real progress requires models that experience the world and learn from their mistakes, the same way that humans do. And this kind of trial and error can be massively accelerated when done in simulation, rather than in the real world. World models offer the most clear path to general-purpose simulation, changing how stories are told, how scientific progress is made and how the next frontiers of humanity are reached. Our team consists of creative, open minded, caring and ambitious people who are determined to change the world. We aspire to continuously build impossible things and our ability to do so relies on building an incredible team. If you are driven to do the same, we'd love to hear from you. *Titles posted to our careers page are updated regularly to best advertise the role and expected seniority, but internally we have a flat titling system with two types of titles: one for individual contributors and one for people managers. ABOUT THE ROLE Open to hiring remote across North America and London — we also have offices in NYC, San Francisco, Seattle, and London. We're building a tool that makes content creation easy and accessible for all types of creatives. Our users love it. Runway has an actively engaged and growing community of passionate artists and creators worldwide. And we're scaling the systems behind our support team so we can keep delivering delightful experiences as that community grows. We're looking for a Support Systems Engineer who ships production code, not tickets and specs: someone who takes a fix from proposal to merged PR themselves. This role reports directly to the Head of Customer Experience. WHAT YOU’LL DO - Own the AI support agent, our ticketing system and other Support tools end to end: authentication (JWT), response logic, routing, escalation paths and tone, tested in staging before it sees live traffic - Ship daily product changes that remove ticket volume. Recent example: extending automatic refund eligibility to one-click credit purchases, accidental upgrades and month-based proration on annual terms - Build and maintain internal CX tooling as real software, not one-offs: scripts, jobs, dashboards, admin surfaces - Run QA and evals with real test suites and pass/fail rubrics, plus monitoring and alerts for outages, bugs and volume spikes - Own releases: staged rollouts, a regression suite before every ship, clear rollback criteria, a writeup when something reaches production - Build the CX reporting the org runs on: volume, deflection, CSAT, reply and resolution time, escalation accuracy, agent spend. You own the correctness and availability of the queries. - Build and stage the guardrails on refunds, account changes and anything touching money or PII, including the audit trail - Keep the knowledge base accurate and structured for the agent to parse, and manage the handoff into the ticketing system - Keep the CX roadmap and the coverage model current, sequenced against priorities set by the Head of CX, so gaps show up before they bite - Run the day-to-day with our AI platform vendor: weekly working session, joint roadmap, issues filed with reproductions - Carry signal across teams: Product and Engineering on bugs and rollouts, Customer Education on self-serve, community on Discord and the forums, GTM and Analytics on routing and reporting WHAT YOU’LL NEED - 5+ years in Customer Experience, Support Engineering or Support Operations, with real time spent writing code - You ship production code in codebases you didn't write: read TypeScript, trace logic through someone else's service, put up a PR that survives review. Our stack is TypeScript and Node.js on AWS - Hands-on experience building and tuning AI or LLM-powered support workflows: prompt and context engineering, routing, escalation design, evals - SQL experience. You own the reporting, so you shouldn't be waiting on Analytics for it - Code-level experience with a billing or payments API: invoices, prorations, refunds. A large share of consumer tickets live here - Git, PR review, CI, staging and feature flags as your default way of working - Real QA and eval experience: you can define rubrics, build test suites and calibrate against what good looks like - Judgment about where a fix belongs, in code, in the agent or in the knowledge base - A track record carrying signal between support, product and other functions and turning it into action - Comfort managing your own work in a fast-moving environment, high ownership and high autonomy - Genuine interest in AI, creative tools or both WHAT SETS YOU APART The most successful person in this role treats the agent and the systems around it like a product they own. They watch where it fails, ship the fix and check whether it worked. They build reporting people actually use. And they show up with improvements no one asked for yet. FOR YOUR APPLICATION During our interview process, you'll have several chances to get acquainted with the Runway product and use all the features our team has built, and that starts now. As part of your application, instead of a cover letter, we ask that you try out the Runway product, specifically build a custom workflow. Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. WORKING AT RUNWAY Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply. More about Runway - Universal World Simulator https://runwayml.com/world-simulator.html - GWM-1 https://runwayml.com/research/introducing-runway-gwm-1 - Gen-4.5 https://runwayml.com/research/introducing-runway-gen-4.5 - General World Models https://runwayml.com/research/introducing-general-world-models - Robotics SDK https://runwayml.com/research/introducing-runway-gwm-1#robotics-section - Conversational Real-time Agents https://runwayml.com/research/introducing-runway-gwm-1#avatars-section - Runway Studios https://runwayml.com/studios We're excited to be recognized as a best place to work: Crain's https://www.crainsnewyork.com/awards/best-places-work-2023 | InHerSight https://www.inhersight.com/companies/best/city/new-york-city-ny | BuiltIn NYC https://builtin.com/awards/new-york-city/2024/best-places-to-work | INC https://www.inc.com/best-workplaces/2024

Требования: — 5+ лет опыта в области облачной безопасности или управления идентификацией — Практический опыт работы с OAuth 2.0, OpenID Connect и JWT, включая выпуск, валидацию и обмен токенами — Опыт работы с потоками On Behalf Of или Token Exchange в production, включая RFC 8693 или эквивалентные механизмы — Опыт работы с корпоративной федерацией идентификации с использованием MS Entra, Okta или Amazon Cognito — Опыт безопасного управления учетными данными и секретами, а также управления жизненным циклом токенов, включая их ротацию и хранение в защищённых хранилищах Задачи: — Разрабатывать входящие и исходящие потоки аутентификации с использованием AWS Bedrock AgentCore Identity или аналогичных технологий — Реализовывать обмен токенами по модели On Behalf Of и передачу контекста идентичности с заданными областями доступа (scopes) между агентами, инструментами и API — Разрабатывать и поддерживать потоки идентификации на основе OAuth 2.0, OpenID Connect и JWT, включая выпуск, валидацию и обмен токенами, а также проверку audience и issuer — Интегрировать федерацию идентификации с MS Entra Agent ID или аналогичной технологией для брокеринга идентичности рабочих нагрузок — Реализовывать исходящую авторизацию через gateway и управление credentials для каждого target, обеспечивая при этом, чтобы секреты не передавались вызывающему агенту — Интегрировать механизмы управления идентификацией в жизненный цикл вызова агента через AgentCore Runtime — Участвовать в реализации авторизации с учётом идентичности на основе Cedar или маппинга claims в MS Entra совместно с механизмами управления Runtime — Обеспечивать безопасное управление credentials и секретами, включая ротацию токенов и их хранение в защищённых хранилищах Условия: — Полная занятость, официальное трудоустройство — Гибкий формат работы: офис, удаленно или гибрид — Частная медицинская страховка — Оплачиваемый отпуск/больничные дни — Доступ к внутренним и внешним образовательным платформам — Рабочее оборудование — Реферальная программа с бонусом за рекомендации друзей и бывших коллег

Задачи: — разрабатывать IAM публичного облака и модель доступа на OpenFGA; — развивать собственный провайдер учётных записей: вход, сессии, OAuth 2.0/OIDC, MFA, федерация; — реализовывать авторизацию для Kubernetes и KCP через webhook; — работать с сервисными аккаунтами, API-ключами и аудитом доступа; — оптимизировать проверки прав, кеширование и синхронизацию IAM-ресурсов. Требования: — коммерческий опыт разработки на Go; — опыт самостоятельной разработки авторизации в продакшене; — глубокое знание OAuth 2.0 и OIDC на стороне сервера; — понимание RBAC, ABAC, ReBAC и модели Zanzibar; — опыт работы с JWT, сессиями, ключами подписи и сервисными аккаунтами; — понимание Kubernetes и его механизмов авторизации. Будет плюсом: — опыт с OpenFGA, SpiceDB, OPA, Cedar; — опыт разработки IAM в публичном облаке; — MFA, WebAuthn, passkeys, SAML, SCIM; — опыт разработки Kubernetes-операторов; — KCP, SPIFFE, mTLS, token exchange. Условия: — оформление по ТК РФ или за рубежом; — полная удалёнка из Москвы.