Skip to Content
On-site

Senior Software Engineer - Identity & Authorization Platform

Job Overview

We are looking for engineers to join our growing team! We are looking for engineers to join our growing team!.

Key points

  1. Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service…

  2. Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes…

  3. Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end.

  4. Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.

  5. Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider…

  6. Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them.

  7. Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable.

  8. Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.

Skills

PythonTypeScriptSQLAWSAzureGoogle Cloud

Experience: Senior-level · 4+ years · Job type: Full-time