RemoteLeaf Logo
Log in Sign up

Senior Software Engineer - Identity & Authorization Platform

2 months, 4 weeks ago
United States
Full-time
Senior
Backend Engineer
Software Development
C++ Go OAuth OpenID Connect Python Rust SAML TypeScript
Apply Now
ClickHouse

ClickHouse

ClickHouse provides a fast open source column-oriented database management system that enables users to generate real-time analytical data reports through SQL queries, catering to the needs of industries requiring efficient data processing and analysis.

IT Services
51-250
Founded 2021
$300M raised
View All Jobs 109

Description

  • Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
  • Develop a unified RBAC/ReBAC service, token issuance, session handling, and embedded SDKs for product teams.
  • Model permissions and access-control primitives such as resources, roles, relationships, and policies across multiple ClickHouse products.
  • Implement and own protocol-level integrations for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless authentication flows.
  • Build telemetry pipelines for audit and authorization decisions so access events are observable and queryable by customers.
  • Partner with product engineering teams to migrate product-specific authentication implementations onto the shared platform.
  • Design APIs that make adoption of the shared auth platform straightforward for other engineers.
  • Carry platform on-call duties and own production reliability for critical-path systems.

Requirements

  • 4+ years of experience building production backend systems at scale.
  • Comfort with at least one systems language such as Go, Rust, or C++.
  • Comfort with at least one application language such as TypeScript or Python.
  • Hands-on experience designing and implementing authentication or authorization services.
  • Experience building a token issuer, OIDC or OAuth2 provider, policy engine, permissions model, or FGA/ReBAC system.
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
  • Experience designing APIs and SDKs that other engineers depend on.
  • Experience operating distributed systems at scale, including caching, consistency tradeoffs, and multi-region concerns.
  • Familiarity with identity vendors such as Auth0, WorkOS, or AWS/GCP/Azure IAM.
  • Strong production debugging instincts and a high bar for developer-friendly systems.
  • Experience with Zanzibar-style authorization systems, OpenFGA, SpiceDB, or Cedar is a plus.
  • Experience designing multi-tenant permission models with custom roles, hierarchies, delegation, and ABAC attributes is a plus.
  • Experience shipping internal SDKs that are actually adopted across an organization is a plus.

Benefits

  • Typical starting salary of $141,000–$208,000 USD in the United States.
  • Typical starting salary of $157,000–$232,000 USD in US premium markets.
  • Remote-friendly, globally distributed work environment operating in over 20 countries.
  • Employer contributions toward healthcare.
  • Stock options for every new team member.
  • Flexible time off in the US and generous leave entitlement in other countries.
  • $500 home office setup stipend for remote employees.
  • Opportunities to connect through company-wide global gatherings and offsites.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Zscaler

Insider Risk Security Engineer

Zscaler 1K-5K Internet Software & Services

Zscaler is hiring a remote U.S. Insider Risk Security Engineer to strengthen its Enterprise Security insider-risk program through investigations, detection engineering, playbook development, and stakeholder engagement.

United States Full-time Senior Security Engineer
$134k-$168k
JavaScript Python SIEM
1 hour, 6 minutes ago
Tailscale

Backend Engineer, Control Plane

Tailscale 51-250 Diversified Telecommunication Services

Tailscale is hiring a full-time Software Engineer for its fully distributed Control Plane Team to build and operate secure control-plane software, relay infrastructure, identity integrations, and related services.

United Kingdom Full-time Mid Level Backend Engineer
$164k-$227k
Go SQL
1 hour, 6 minutes ago
Iterable

Senior Director, Security Engineering

Iterable 251-1K Media

Iterable is hiring a Senior Director, Security Engineering to lead its global security organization and technical security portfolio, strengthening product, platform, application, detection, and response capabilities while advancing an AI-forward security strategy.

United States Full-time Executive Security Engineer
$220k-$300k
1 hour, 21 minutes ago
Harford County Public Library

[Crédito] Software Engineer III - C#

Harford County Public Library 51-250 Diversified Consumer Services

A Stone busca uma pessoa Software Engineer Pleno para desenvolver soluções em C# e atuar na resolução de problemas complexos relacionados a produtos financeiros e plataformas de engenharia.

Brazil Full-time Mid Level Backend Engineer
Azure C# CI/CD Datadog Docker Elasticsearch GCP Git GitFlow Kafka Kanban Microservices RabbitMQ Scrum Solid.js
1 hour, 21 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers