ClickHouse

1 month ago

Senior Software Engineer - Identity & Authorization Platform

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 17 hours agoStatus: Live

Job Summary

Design and build platform services powering authentication, authorization, and audit across ClickHouse Cloud. Ship a unified RBAC/ReBAC system, token issuance, session handling, and SDKs. Model permissions across ClickHouse components, implement SAML/SCIM/OIDC/OAuth2/MFA flows, build observability for access decisions, and drive adoption of a shared, scalable identity platform with strong reliability.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud, including a unified RBAC/ReBAC service, token issuance, session handling, and product-team SDKs.
•Model permissions and access control primitives (resources, roles, relationships, policies) that work across multiple products and surface libraries/APIs for broad adoption.
•Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows, and own the integrations for enterprise SSO and provisioning.
•Build the audit and authorization-decision telemetry pipeline so every access decision is observable and surfaceable to customers.
•Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform and design easy-to-use APIs for adoption.
•Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.

Pay and Benefits

Salary: USD 141,000 - 208,000 annually

Perks:Remote WorkHealth InsuranceEquityTime OffHome OfficeGlobal Gatherings

Key Requirements

•Minimum 4+ years building production backend systems at scale with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
•Hands-on experience designing and implementing an authentication or authorization service (e.g., token issuer, OIDC/OAuth2 provider, policy engine, or Zanzibar/OpenFGA/Cedar-like system).
•Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and ability to implement them.
•Experience designing APIs and SDKs that other engineers depend on and can adopt widely.
•Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.

Experience:CloudSaaSIdentity

Skills:GoRustC++TypeScriptPythonSAMLSCIMOIDCOAuth2MFARBACReBACOpenFGASpiceDBCedar

Languages:English

Tech Stack:GoRustC++TypeScriptPythonSAMLSCIMOIDCOAuth2MFARBACReBACOpenFGASpiceDBCedar

Company Brief

ClickHouse

Develops ClickHouse, a high-performance open-source columnar database for real-time analytics, enabling fast querying and processing of large volumes of data for analytics, monitoring, and business intelligence workloads.

Industry: Data Infrastructure

Headquarters: Menlo Park, United States

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

ClickHouse

1 month ago

Senior Software Engineer - Identity & Authorization Platform

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 17 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud, including a unified RBAC/ReBAC service, token issuance, session handling, and product-team SDKs.
•Model permissions and access control primitives (resources, roles, relationships, policies) that work across multiple products and surface libraries/APIs for broad adoption.
•Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows, and own the integrations for enterprise SSO and provisioning.
•Build the audit and authorization-decision telemetry pipeline so every access decision is observable and surfaceable to customers.
•Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform and design easy-to-use APIs for adoption.
•Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.

Pay and Benefits

Salary: USD 141,000 - 208,000 annually

Perks:Remote WorkHealth InsuranceEquityTime OffHome OfficeGlobal Gatherings

Key Requirements

•Minimum 4+ years building production backend systems at scale with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
•Hands-on experience designing and implementing an authentication or authorization service (e.g., token issuer, OIDC/OAuth2 provider, policy engine, or Zanzibar/OpenFGA/Cedar-like system).
•Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and ability to implement them.
•Experience designing APIs and SDKs that other engineers depend on and can adopt widely.
•Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.

Experience:CloudSaaSIdentity

Skills:GoRustC++TypeScriptPythonSAMLSCIMOIDCOAuth2MFARBACReBACOpenFGASpiceDBCedar

Languages:English

Tech Stack:GoRustC++TypeScriptPythonSAMLSCIMOIDCOAuth2MFARBACReBACOpenFGASpiceDBCedar

Company Brief

ClickHouse

Industry: Data Infrastructure

Headquarters: Menlo Park, United States

Founded: 2016

Website LinkedIn