Senior Software Engineer - Identity & Authorization Platform
ClickHouse3 months ago
Remote, CanadaSenior
Responsibilities
- Design and build platform services for authentication, authorization, audit, RBAC/ReBAC, token issuance, session handling, and authorization SDKs
- Model permissions and access-control primitives across ClickHouse, SQL Console, ClickPipes, and HyperDX
- Implement SAML, SCIM, OIDC, OAuth2, MFA, and passwordless authentication flows
- Build audit and authorization-decision telemetry pipelines that are observable and queryable
- Partner with product engineering teams to migrate bespoke authentication implementations to the shared platform
- Carry the platform on-call rotation and own production reliability for systems on the critical path of customer requests
Requirements
- At least 4 years of experience building production backend systems at scale
- Experience with at least one systems language: Go, Rust, or C++, and one application language: TypeScript or Python
- Hands-on experience designing and implementing authentication or authorization services
- Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level
- Experience designing APIs and SDKs for other engineers
- Experience operating distributed systems at scale, including caching, consistency tradeoffs, and multi-region concerns
- Familiarity with identity vendors and IAM platforms including Auth0, WorkOS, AWS IAM, GCP IAM, or Azure IAM
- Strong production debugging skills and focus on developer-friendly systems
- Bonus: experience with Zanzibar-style authorization systems or OpenFGA or SpiceDB deployments
- Bonus: experience designing multi-tenant permission models with custom roles, hierarchies, delegation, and ABAC attributes
- Bonus: experience shipping SDKs adopted across an organization
Benefits
- Flexible, remote-friendly work environment across more than 20 countries
- Employer contributions toward healthcare
- Company stock options for new team members
- Flexible time off in the US and generous entitlement in other countries
- $500 home office setup for remote employees
- Opportunities to attend company-wide global offsites
About ClickHouse
ClickHouse builds an open-source, columnar OLAP database and a managed cloud service for teams that need real-time analytics at scale. The company monetizes through ClickHouse Cloud and commercial support for enterprises running analytics, observability, and AI workloads. Founded in 2021 and headquartered in Palo Alto, it is privately held and serves as the primary commercial steward of the ClickHouse project.