Senior Software Engineer - Identity & Authorization Platform

4 weeks ago
Full-time
Senior
Software Development
ClickHouse

ClickHouse

ClickHouse provides a fast open source column-oriented database management system that enables users to generate real-time analytical data reports through SQL queries, catering to the needs of industries requiring efficient data processing and analysis.

IT Services
51-250
Founded 2021
$300M raised

Description

  • Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
  • Develop a unified RBAC/ReBAC service, token issuance, session handling, and embedded SDKs for product teams.
  • Model permissions and access-control primitives such as resources, roles, relationships, and policies across multiple ClickHouse products.
  • Implement and own protocol-level integrations for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless authentication flows.
  • Build telemetry pipelines for audit and authorization decisions so access events are observable and queryable by customers.
  • Partner with product engineering teams to migrate product-specific authentication implementations onto the shared platform.
  • Design APIs that make adoption of the shared auth platform straightforward for other engineers.
  • Carry platform on-call duties and own production reliability for critical-path systems.

Requirements

  • 4+ years of experience building production backend systems at scale.
  • Comfort with at least one systems language such as Go, Rust, or C++.
  • Comfort with at least one application language such as TypeScript or Python.
  • Hands-on experience designing and implementing authentication or authorization services.
  • Experience building a token issuer, OIDC or OAuth2 provider, policy engine, permissions model, or FGA/ReBAC system.
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
  • Experience designing APIs and SDKs that other engineers depend on.
  • Experience operating distributed systems at scale, including caching, consistency tradeoffs, and multi-region concerns.
  • Familiarity with identity vendors such as Auth0, WorkOS, or AWS/GCP/Azure IAM.
  • Strong production debugging instincts and a high bar for developer-friendly systems.
  • Experience with Zanzibar-style authorization systems, OpenFGA, SpiceDB, or Cedar is a plus.
  • Experience designing multi-tenant permission models with custom roles, hierarchies, delegation, and ABAC attributes is a plus.
  • Experience shipping internal SDKs that are actually adopted across an organization is a plus.

Benefits

  • Typical starting salary of $141,000–$208,000 USD in the United States.
  • Typical starting salary of $157,000–$232,000 USD in US premium markets.
  • Remote-friendly, globally distributed work environment operating in over 20 countries.
  • Employer contributions toward healthcare.
  • Stock options for every new team member.
  • Flexible time off in the US and generous leave entitlement in other countries.
  • $500 home office setup stipend for remote employees.
  • Opportunities to connect through company-wide global gatherings and offsites.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Backend Engineer, Developer Platform (Horde)

Epic Games 5K-10K Internet Software & Services

Epic Games is hiring a senior programmer for its Unreal Engine developer platform team to work on Horde, the internal platform that supports CI/CD, remote execution, build health, storage, and developer workflows.

AWS Azure C# CI/CD gRPC MongoDB .NET Redis
14 hours, 18 minutes ago

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
14 hours, 33 minutes ago

Senior Staff Back-end Engineer (eCommerce Engineering)

Coupang 1K-5K Internet Software & Services

Coupang is hiring a Senior Staff Backend Engineer to lead the architecture and technical strategy for its core e-commerce platform services across global markets.

Apache Airflow Apache Spark AWS Cassandra Grafana Java Kafka Kotlin Kubernetes Microservices OpenTelemetry Prometheus Spring
14 hours, 33 minutes ago

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
14 hours, 33 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers