← All roles

Senior Software Engineer - Identity & Authorization Platform

ClickHouse· Security
Apply on company site
Hybrid (Canada)UnknownPosted 4mo ago

About the role

Senior backend engineer focused on building and evolving ClickHouse Cloud's identity, authentication, authorization, and audit platform, including RBAC/ReBAC, token issuance, SSO integrations, and observability of access decisions.

Responsibilities

  • Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud, including a unified RBAC/ReBAC service, token issuance and session handling, and embeddable SDKs.
  • Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX, and ship the libraries and APIs for other engineers.
  • Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows; own enterprise SSO and provisioning integrations end-to-end.
  • Build the audit and authorization-decision telemetry pipeline for observable, queryable access decisions for customers.
  • Partner with product engineering to migrate bespoke per-product auth into the shared platform and design adoption-friendly APIs.
  • Carry the platform on-call rotation and own production reliability for systems on the critical path of customer requests.

Qualifications

  • Minimum 4+ years building production backend systems at scale.
  • Proficiency in at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
  • Hands-on experience designing and implementing an authentication or authorization service (token issuer, OIDC/OAuth2 provider, policy engine, permissions model, Zanzibar/OpenFGA/SpiceDB/Cedar-style).
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level; able to implement them.
  • Experience designing APIs and SDKs used by other engineers and driving adoption.
  • Experience operating distributed systems at scale, including caching, consistency, and multi-region considerations.
  • Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks in a larger platform.
  • Strong production debugging instincts and building developer-friendly systems.

Skills

Required:Backend developmentSystems programmingApplication programmingAuthentication/Authorization designAPI/SDK design for adoptionDistributed systems
Nice to have:Identity vendor integration

Benefits

  • Flexible work environment – remote-friendly with global distribution.
  • Healthcare employer contributions.
  • Equity in the company (stock options).
  • Flexible time off (US) / generous entitlements in other countries.
  • A $500 Home office setup for remote employees.
  • Global Gatherings – company-wide offsites.
Last updated Aug 5, 2026. Interested? Apply on the company site.
ClickHouse logo

About ClickHouse

Fast Open-Source OLAP DBMS - ClickHouse

ClickHouse is a fast open-source column-oriented database management system that allows generating analytical data reports in real-time using SQL queries

OLAPanalyticsbrex-fastest-growing-2025databasedatasystemsenterprise-infrastructurewing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at ClickHouse