Senior Software Engineer - Identity & Authorization Platform

2 hours, 38 minutes ago
Full-time
Senior
Software Development
ClickHouse

ClickHouse

ClickHouse provides a fast open source column-oriented database management system that enables users to generate real-time analytical data reports through SQL queries, catering to the needs of industries requiring efficient data processing and analysis.

IT Services
51-250
Founded 2021
$300M raised

Description

  • Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
  • Develop a unified RBAC/ReBAC service, token issuance, session handling, and embedded SDKs for product teams.
  • Model permissions and access-control primitives such as resources, roles, relationships, and policies across multiple ClickHouse products.
  • Implement and own protocol-level integrations for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless authentication flows.
  • Build telemetry pipelines for audit and authorization decisions so access events are observable and queryable by customers.
  • Partner with product engineering teams to migrate product-specific authentication implementations onto the shared platform.
  • Design APIs that make adoption of the shared auth platform straightforward for other engineers.
  • Carry platform on-call duties and own production reliability for critical-path systems.

Requirements

  • 4+ years of experience building production backend systems at scale.
  • Comfort with at least one systems language such as Go, Rust, or C++.
  • Comfort with at least one application language such as TypeScript or Python.
  • Hands-on experience designing and implementing authentication or authorization services.
  • Experience building a token issuer, OIDC or OAuth2 provider, policy engine, permissions model, or FGA/ReBAC system.
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
  • Experience designing APIs and SDKs that other engineers depend on.
  • Experience operating distributed systems at scale, including caching, consistency tradeoffs, and multi-region concerns.
  • Familiarity with identity vendors such as Auth0, WorkOS, or AWS/GCP/Azure IAM.
  • Strong production debugging instincts and a high bar for developer-friendly systems.
  • Experience with Zanzibar-style authorization systems, OpenFGA, SpiceDB, or Cedar is a plus.
  • Experience designing multi-tenant permission models with custom roles, hierarchies, delegation, and ABAC attributes is a plus.
  • Experience shipping internal SDKs that are actually adopted across an organization is a plus.

Benefits

  • Typical starting salary of $141,000–$208,000 USD in the United States.
  • Typical starting salary of $157,000–$232,000 USD in US premium markets.
  • Remote-friendly, globally distributed work environment operating in over 20 countries.
  • Employer contributions toward healthcare.
  • Stock options for every new team member.
  • Flexible time off in the US and generous leave entitlement in other countries.
  • $500 home office setup stipend for remote employees.
  • Opportunities to connect through company-wide global gatherings and offsites.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Payments Engineer — Acquiring & Payment Processing

Sezzle 251-1K Diversified Financial Services

Sezzle is hiring a Senior Payments Engineer to own and scale its backend acquiring and payment-processing systems that support transaction accuracy, resilience, and money movement across processors and gateways.

AWS CI/CD Datadog Elasticsearch Git GitLab Go Kafka Kubernetes LLM Microservices MySQL New Relic PostgreSQL Prometheus Python RabbitMQ React React Native REST API SQL TypeScript
2 hours, 8 minutes ago

Application Engineer, Product Catalog

Google 100K+ Internet Software & Services

GFiber is hiring an Application Engineer to help design and maintain the systems and rules engines behind its product catalog for internet services across the U.S.

GCP GitHub Java Kotlin Microservices Redis Salesforce Spring Boot
2 hours, 8 minutes ago

Senior Security Operations Engineer I

Samsara 1K-5K IT Services

Samsara is hiring a Security Operations professional to lead incident response, digital forensic investigations, and security operations support for a global platform serving physical industries.

AWS GCP Linux macOS Python SIEM
2 hours, 23 minutes ago

Senior Security Engineer

Tekion 1K-5K IT Services

Tekion is seeking a Security Engineer to lead security engineering for its cloud-native automotive platform, helping secure critical systems while partnering with cross-functional teams to strengthen architecture, detection, and risk mitigation.

AWS Azure Bash Cybersecurity GCP Python SIEM Terraform
2 hours, 23 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers