Senior Software Engineer - Identity & Authorization Platform
Build and operate ClickHouse Cloud’s shared identity and authorization platform, including permission models, authentication protocols, APIs, SDKs, and audit telemetry. The role requires 4+ years of backend engineering experience, identity-system expertise, and proficiency in systems and application languages.
About the job
Responsibilities
- Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
- Develop unified RBAC/ReBAC services, token issuance, session handling, and SDKs for product teams.
- Model permissions and access-control primitives, including resources, roles, relationships, and policies.
- Ship libraries and APIs used by engineering teams across ClickHouse, SQL Console, ClickPipes, and HyperDX.
- Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless authentication flows.
- Own enterprise SSO and provisioning integrations end to end.
- Build audit and authorization-decision telemetry pipelines.
- Partner with product engineering teams to migrate bespoke authentication implementations to the shared platform.
- Participate in the platform on-call rotation and own production reliability for critical systems.
Requirements
- 4+ years building production backend systems at scale.
- Proficiency in at least one systems language: Go, Rust, or C++.
- Proficiency in at least one application language: TypeScript or Python.
- Hands-on experience designing and implementing authentication or authorization services, such as token issuers, OIDC/OAuth2 providers, policy engines, permissions models, or FGA/ReBAC systems.
- Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
- Experience designing APIs and SDKs used by other engineers.
- Experience operating distributed systems at scale, including caching, consistency, and multi-region concerns.
- Familiarity with identity vendors and cloud IAM services, including Auth0, WorkOS, AWS IAM, Google Cloud IAM, or Azure IAM.
- Strong production debugging and reliability skills.
Nice-to-haves
- Experience building or contributing to a Zanzibar-style authorization system, or operating OpenFGA or SpiceDB in production.
- Experience designing multi-tenant permission models supporting custom roles, hierarchies, delegation, and ABAC attributes.
- Experience shipping broadly adopted internal SDKs.
Compensation and Benefits
- Equity through company stock options.
- Healthcare contributions.
- Flexible time off in the United States and generous time-off entitlements in other countries.
- USD $500 home-office setup allowance for remote employees.
- Flexible, remote-friendly work environment.
- Opportunities to attend company-wide offsites.
Skills
Go, Rust, C++, TypeScript, Python, RBAC, Rebac, SAML, SCIM, OIDC, Oauth2, MFA, Distributed Systems, Openfga, Spicedb
Similar jobs
Backend Engineering jobs
Okta
Toronto, Canada
Senior software engineer designing and scaling secure server-side services for Okta’s device identity platform. The role requires strong Java and Spring expertise, database and API design experience, and the ability to mentor engineers while driving scalable, secure development practices.
Coinbase
United States
Build and operate high-throughput blockchain infrastructure, APIs, and platform primitives integrating protocols such as Ethereum and Bitcoin with internal services. Requires 5+ years of software engineering experience, distributed-systems expertise, and hands-on crypto infrastructure experience.
Cloudflare
Atlanta, GADesign, build, and operate Cloudflare’s globally distributed cache and reverse-proxy data plane, improving performance, correctness, and resilience across the edge. Requires at least 4 years of production systems experience and proficiency in a systems or backend language.
Hinge Health
San Francisco, CA
Senior backend engineer designing and operating reliable billing and financial systems, APIs, data models, and distributed workflows. The role requires 5+ years of professional software development experience, strong backend expertise, and collaboration across Product, Finance, Operations, and Data.
Cloudflare
Lisbon, Portugal
Senior software engineer building and operating large-scale egress connectivity infrastructure using Go or Rust. The role requires networking expertise, distributed-systems experience, strong debugging skills, and participation in production on-call operations.