Senior Software Engineer - Identity & Authorization Platform
Core
Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud, including unified RBAC/ReBAC, token issuance, session handling, and SDKs.
Role type
Senior IC backend engineer (identity & authorization platform)
Builds
Production authentication/authorization services, SDKs, and APIs for ClickHouse Cloud and related products
Domain
Cloud infrastructure, identity management, distributed systems
Required skills
Go, Rust, C++, TypeScript, Python, SAML, SCIM, OIDC, OAuth2, MFA, distributed systems, caching, multi-region architecture, API/SDK design
Preferred skills
Zanzibar-style authorization systems, OpenFGA, SpiceDB, Cedar, multi-tenant permission models, identity vendor integration (Auth0, WorkOS, AWS/GCP/Azure IAM)
Responsibilities
Design and build platform services for auth/authorization/audit; Model permissions and access control primitives; Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA; Build audit and authorization-decision telemetry pipeline; Partner with product teams to migrate bespoke auth implementations; Carry on-call rotation and own production reliability
Seniority
Senior, hands-on IC
