Senior Software Engineer - Identity & Authorization Platform

The role

You will design and build platform services for authentication, authorization, and audit across ClickHouse Cloud. This includes modeling permissions, implementing protocols like SAML and OIDC, and building telemetry pipelines.

What you will do

• Design and build platform services for authentication, authorization, and audit
• Model permissions and access control primitives
• Ship libraries and APIs for other engineers
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows
• Own integrations for enterprise SSO and provisioning
• Build the audit and authorization-decision telemetry pipeline
• Partner with product engineering teams to migrate auth implementations
• Carry the platform on-call rotation

Required qualifications

• Minimum 4+ years building production backend systems at scale
• Comfort with at least one systems language (Go, Rust, C++)
• Comfort with one application language (TypeScript, Python)
• Hands-on experience designing and implementing an authentication or authorization service
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level
• Experience designing APIs and SDKs that other engineers depend on
• Experience operating distributed systems at scale
• Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM)

Nice to have

• Built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment
• Designed a multi-tenant permission model
• Shipped an SDK that product teams across an org actually adopted

Benefits

• Flexible work environment
• Employer contributions towards healthcare
• Stock options
• Flexible time off in the US, generous entitlement in other countries
• USD$500 Home office setup if you’re a remote employee
• Opportunities to engage with colleagues at company-wide offsites

About the company

ClickHouse is a globally distributed company that is remote-friendly and operates in over 25 countries.