Senior Software Engineer - Identity & Authorization Platform

2 weeks, 2 days ago
Full-time
Senior
Software Development
ClickHouse

ClickHouse

ClickHouse provides a fast open source column-oriented database management system that enables users to generate real-time analytical data reports through SQL queries, catering to the needs of industries requiring efficient data processing and analysis.

IT Services
51-250
Founded 2021
$300M raised

Description

  • Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
  • Develop a unified RBAC/ReBAC service, token issuance, session handling, and SDKs used by product teams.
  • Model permissions and access-control primitives that work across ClickHouse, SQL Console, ClickPipes, and HyperDX.
  • Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
  • Own enterprise SSO and provisioning integrations end to end.
  • Build the audit and authorization-decision telemetry pipeline so access decisions are observable and queryable.
  • Partner with product engineering teams to migrate product-specific auth systems onto the shared platform.
  • Design APIs that make platform adoption straightforward for other engineers.
  • Carry the platform on-call rotation and own production reliability for critical-path systems.

Requirements

  • 4+ years building production backend systems at scale.
  • Comfort with at least one systems language such as Go, Rust, or C++.
  • Comfort with at least one application language such as TypeScript or Python.
  • Hands-on experience designing and implementing an authentication or authorization service.
  • Experience building a token issuer, OIDC/OAuth2 provider, policy engine, permissions model, or FGA/ReBAC system such as Zanzibar, OpenFGA, SpiceDB, or Cedar.
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
  • Experience designing APIs and SDKs that other engineers depend on.
  • Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.
  • Familiarity with identity vendors such as Auth0, WorkOS, or AWS/GCP/Azure IAM.
  • Strong production debugging instincts and a high bar for developer-friendly systems.
  • Preferred: experience building or contributing to a Zanzibar-style authorization system or running OpenFGA or SpiceDB in production.
  • Preferred: experience designing a multi-tenant permission model with custom roles, hierarchies, delegation, and ABAC attributes.
  • Preferred: experience shipping an SDK that product teams across an organization actually adopted.

Benefits

  • Competitive compensation with location-based premium market ranges in certain US markets.
  • Employer contributions toward healthcare.
  • Equity in the company through stock options for new team members.
  • Flexible time off in the US and generous time off in other countries.
  • $500 home office setup budget for remote employees.
  • Globally distributed, remote-friendly work environment across more than 20 countries.
  • Opportunities to connect with colleagues through company-wide global gatherings and offsites.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Backend Engineer - Grafana Search & Storage | Spain | Remote

Grafana 1K-5K IT Services

Grafana Labs is hiring a Senior Backend Engineer to help build and operate its next-generation search and storage platform for Grafana Cloud and related products.

Go Grafana Kubernetes Prometheus
19 minutes ago

Software Engineer II - Model Platform

Abnormal AI Internet Software & Services

Abnormal AI is hiring a Software Backend Engineer II to join its Detection Team and build the Model Platform infrastructure that supports ML and Data Science work on advanced email and cloud attack detection.

AWS Azure Django GCP Go Kubernetes Machine Learning OWASP PostgreSQL Python
36 minutes ago

Senior Ruby/Rails Back-End Developer

emerchantpay 251-1K Diversified Financial Services

emerchantpay is hiring experienced Ruby on Rails developers to build and scale payment platform components for a global payments business.

Ansible AWS BDD Docker GraphQL JavaScript MySQL PostgreSQL RabbitMQ React Redis RSpec Ruby Ruby on Rails TDD Terraform
1 hour, 39 minutes ago

Senior Detection and Response Engineer

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is hiring a Senior Detection and Response Engineer to build and operate defensive security controls that protect the infrastructure supporting its defense technology products.

AWS Azure CI/CD CloudFormation Docker GitHub Go Kubernetes Network Security Python Rust SQL Terraform
1 hour, 41 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers