Senior Software Engineer - Identity & Authorization Platform

2 months, 1 week ago
Full-time
Senior
Software Development
ClickHouse

ClickHouse

ClickHouse provides a fast open source column-oriented database management system that enables users to generate real-time analytical data reports through SQL queries, catering to the needs of industries requiring efficient data processing and analysis.

IT Services
51-250
Founded 2021
$300M raised

Description

  • Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
  • Develop a unified RBAC/ReBAC service, token issuance, session handling, and embedded SDKs for product teams.
  • Model permissions and access-control primitives such as resources, roles, relationships, and policies across multiple ClickHouse products.
  • Implement and own protocol-level integrations for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless authentication flows.
  • Build telemetry pipelines for audit and authorization decisions so access events are observable and queryable by customers.
  • Partner with product engineering teams to migrate product-specific authentication implementations onto the shared platform.
  • Design APIs that make adoption of the shared auth platform straightforward for other engineers.
  • Carry platform on-call duties and own production reliability for critical-path systems.

Requirements

  • 4+ years of experience building production backend systems at scale.
  • Comfort with at least one systems language such as Go, Rust, or C++.
  • Comfort with at least one application language such as TypeScript or Python.
  • Hands-on experience designing and implementing authentication or authorization services.
  • Experience building a token issuer, OIDC or OAuth2 provider, policy engine, permissions model, or FGA/ReBAC system.
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
  • Experience designing APIs and SDKs that other engineers depend on.
  • Experience operating distributed systems at scale, including caching, consistency tradeoffs, and multi-region concerns.
  • Familiarity with identity vendors such as Auth0, WorkOS, or AWS/GCP/Azure IAM.
  • Strong production debugging instincts and a high bar for developer-friendly systems.
  • Experience with Zanzibar-style authorization systems, OpenFGA, SpiceDB, or Cedar is a plus.
  • Experience designing multi-tenant permission models with custom roles, hierarchies, delegation, and ABAC attributes is a plus.
  • Experience shipping internal SDKs that are actually adopted across an organization is a plus.

Benefits

  • Typical starting salary of $141,000–$208,000 USD in the United States.
  • Typical starting salary of $157,000–$232,000 USD in US premium markets.
  • Remote-friendly, globally distributed work environment operating in over 20 countries.
  • Employer contributions toward healthcare.
  • Stock options for every new team member.
  • Flexible time off in the US and generous leave entitlement in other countries.
  • $500 home office setup stipend for remote employees.
  • Opportunities to connect through company-wide global gatherings and offsites.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Quantum Computing / Cryptography Engineer

MKS2 Technologies 51-250 Internet Software & Services

MKS2 Technologies is seeking a remote Quantum Computing / Cryptography Engineer to support a federal program by advancing cryptographic modernization, quantum readiness, and post-quantum security migration planning.

C++ Cybersecurity Encryption Java Python
16 hours, 56 minutes ago

Backend Engineer

Resolve to Save Lives 51-250 Capital Markets

Resolve to Save Lives is seeking a remote Backend Engineer in India, Nigeria, or Ethiopia to build and maintain reliable digital health tools and integrations supporting large-scale cardiovascular, hypertension, and diabetes programs.

ActiveRecord AWS CI/CD Docker Grafana Java Kubernetes Machine Learning MLOps PostgreSQL Prometheus Python Ruby Ruby on Rails SQL
16 hours, 56 minutes ago

Cybersecurity Research Assistant

Axle Informatics 51-250 Pharmaceuticals

Axle is seeking a remote Cybersecurity Research Assistant in the United States to support rare disease research at NIH by implementing and monitoring security controls across Kubernetes, Linux, database, and high-performance computing environments.

Ansible Bash Cybersecurity DNS Elasticsearch Git Grafana Kubernetes Linux LLM Prometheus Python RHEL Secrets Management TCP/IP Terraform TLS Ubuntu
17 hours, 11 minutes ago

Senior Software Engineer -Java( AI+Telecom)

3Pillar Global 1K-5K Internet Software & Services

As a Java Software Engineer at 3Pillar Global, you will build and deliver scalable, high-availability enterprise applications and collaborate with global client teams from technical design through launch.

Agile Apache C++ Hibernate HTTP JSON Microservices Oracle PostgreSQL Redis Spring Spring Boot SQL XML
17 hours, 41 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers