Senior Software Engineer – Identity & Authorization Platform

About the role

The Platform Auth team’s goal is to support our “one customer identity” vision by providing tools, processes, and expertise for unified access management. We are looking for senior engineers to design and build the authentication, authorization, and audit platform for ClickHouse Cloud.

Key responsibilities

• Design and implement platform services for authentication, authorization, token issuance, session handling, and SDKs used across product teams.
• Model permissions and access‑control primitives (resources, roles, relationships, policies) that work across ClickHouse services.
• Implement protocol‑level support for SAML, SCIM, OIDC, OAuth2, and MFA/password‑less flows.
• Build the audit and decision‑telemetry pipeline to make every access decision observable.
• Partner with product engineering teams to migrate bespoke auth implementations onto the shared platform.
• Participate in on‑call rotation and ensure production reliability for critical customer requests.

Required profile

• 4+ years building production backend systems at scale.
• Hands‑on experience designing and implementing authentication or authorization services.
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
• Experience operating distributed systems, including caching, consistency trade‑offs, and multi‑region concerns.

Required skills

• Go, Rust, C++
• TypeScript, Python
• SAML, SCIM, OIDC, OAuth2, MFA
• RBAC/ReBAC, OpenFGA, SpiceDB, Zanzibar, Cedar

What we offer

• Flexible remote‑friendly work environment across 25+ countries.
• Employer‑paid healthcare contributions.
• Equity via stock options for every new team member.
• USD 500 home‑office stipend for remote employees.
• Flexible time off and global gatherings.