About the Role
Zerozilla builds multi-tenant SaaS platforms for enterprise clients. We are hiring a Lead Golang Engineer to own the backend architecture and lead a small team building it – roughly 70% design and coding, 30% technical leadership, code reviews and mentoring. We run on Microsoft Azure (AKS), self-host Keycloak for multi-tenant identity, and use gRPC between services.
Your Impact
- Own the architecture for multi-tenant, multi-user Golang platforms – service boundaries, tenant isolation (PostgreSQL row-level security, partitioning), API design and inter-service communication.
- Lead and mentor the backend team; run code and architecture reviews; set coding standards, design patterns and Definition of Done.
- Design and hands-on build core microservices in Golang – gRPC and REST APIs, secure HTTPS / TLS and mutual TLS between services.
- Own identity and access on self-hosted Keycloak – SSO / Single Logout, OAuth2 / OIDC, RBAC, JWKS validation, MFA, and LDAP / Active Directory federation.
- Own PostgreSQL data architecture and operations on Azure (AKS, Azure API Management), plus non-functional requirements – security, performance, reliability and observability (metrics, logs, traces, SLOs).
Must-Have Skills & Experience
- 8-10 years backend experience, including 3+ years hands-on Golang and 2+ years leading engineers.
- Deep Golang – concurrency (goroutines, channels, context), net/http and a framework (Gin, Echo, Fiber or chi), Go modules, profiling, table-driven and integration testing.
- Microservices at scale – gRPC / Protocol Buffers, REST, API versioning, backward-compatible schema evolution and resilience patterns.
- Solid PostgreSQL – schema and index design, query optimization (EXPLAIN ANALYZE), connection pooling, migrations, and multi-tenant patterns (row-level security, partitioning).
- Self-hosted Keycloak – realms, clients, OAuth2 / OIDC, SSO, RBAC, JWKS validation, and LDAP / Active Directory federation.
- Microsoft Azure and AKS – deployments, autoscaling, ingress, Helm, secrets management – plus an API gateway such as Azure API Management (routing, rate limiting, JWT validation, versioning).
- HTTPS / TLS and mutual TLS; Redis or equivalent for caching, sessions and rate limiting; observability (Prometheus, Grafana, OpenTelemetry); CI/CD (Git plus GitHub Actions / Jenkins / Azure DevOps).
- Proven ability to lead code reviews and mentor engineers. Bachelor’s or Master’s in Computer Science / Engineering, or equivalent practical experience.
Set Yourself Apart With
Advanced Keycloak (SAML, identity brokering, Keycloak Authorization Services, custom auth flows / SPIs, SCIM, step-up / passwordless WebAuthn, HA clustering); event-driven architecture (Kafka, RabbitMQ or Azure Service Bus); Infrastructure as Code (Terraform or Bicep); progressive delivery and supply-chain security (govulncheck, dependency scanning, multi-stage / distroless images); another backend language (Python, Java or Node.js); Generative AI / AI-assisted developer tooling; FinTech / BFSI or other regulated-industry exposure; strong stakeholder communication.