RemoteLeaf Logo
Log in Sign up

Senior Software Engineer - Identity & Authorization Platform

3 months, 2 weeks ago
United States
Full-time
Senior
Backend Engineer
Software Development
C++ Go OAuth OpenID Connect Python Rust SAML TypeScript
Apply Now
ClickHouse

ClickHouse

ClickHouse provides a fast open source column-oriented database management system that enables users to generate real-time analytical data reports through SQL queries, catering to the needs of industries requiring efficient data processing and analysis.

IT Services
51-250
Founded 2021
$300M raised
View All Jobs 109

Description

  • Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
  • Develop a unified RBAC/ReBAC service, token issuance, session handling, and embedded SDKs for product teams.
  • Model permissions and access-control primitives such as resources, roles, relationships, and policies across multiple ClickHouse products.
  • Implement and own protocol-level integrations for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless authentication flows.
  • Build telemetry pipelines for audit and authorization decisions so access events are observable and queryable by customers.
  • Partner with product engineering teams to migrate product-specific authentication implementations onto the shared platform.
  • Design APIs that make adoption of the shared auth platform straightforward for other engineers.
  • Carry platform on-call duties and own production reliability for critical-path systems.

Requirements

  • 4+ years of experience building production backend systems at scale.
  • Comfort with at least one systems language such as Go, Rust, or C++.
  • Comfort with at least one application language such as TypeScript or Python.
  • Hands-on experience designing and implementing authentication or authorization services.
  • Experience building a token issuer, OIDC or OAuth2 provider, policy engine, permissions model, or FGA/ReBAC system.
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
  • Experience designing APIs and SDKs that other engineers depend on.
  • Experience operating distributed systems at scale, including caching, consistency tradeoffs, and multi-region concerns.
  • Familiarity with identity vendors such as Auth0, WorkOS, or AWS/GCP/Azure IAM.
  • Strong production debugging instincts and a high bar for developer-friendly systems.
  • Experience with Zanzibar-style authorization systems, OpenFGA, SpiceDB, or Cedar is a plus.
  • Experience designing multi-tenant permission models with custom roles, hierarchies, delegation, and ABAC attributes is a plus.
  • Experience shipping internal SDKs that are actually adopted across an organization is a plus.

Benefits

  • Typical starting salary of $141,000–$208,000 USD in the United States.
  • Typical starting salary of $157,000–$232,000 USD in US premium markets.
  • Remote-friendly, globally distributed work environment operating in over 20 countries.
  • Employer contributions toward healthcare.
  • Stock options for every new team member.
  • Flexible time off in the US and generous leave entitlement in other countries.
  • $500 home office setup stipend for remote employees.
  • Opportunities to connect through company-wide global gatherings and offsites.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

B Lab

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Netherlands Full-time Lead Compliance Manager Security Engineer
$55k-$66k
Cybersecurity Penetration Testing Salesforce
5 hours, 15 minutes ago
B Lab

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

United Kingdom Netherlands Brazil Full-time Lead Compliance Manager Security Engineer
$31k-$38k
Cybersecurity Penetration Testing Salesforce
5 hours, 15 minutes ago
Edmentum

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

United States Full-time Mid Level Security Engineer
$105k-$120k
Agile Penetration Testing
6 hours ago
Ottimate

Software Engineer - Python

Ottimate IT Services

Ottimate is seeking a Backend Engineer to build and scale Django-based products that simplify accounts payable and payments for businesses.

India Full-time Mid Level Backend Engineer
Angular AWS Django Microservices PostgreSQL Python
6 hours, 15 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers