Senior Software Engineer - Identity & Authorization Platform
Core
Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud, including unified RBAC/ReBAC, token issuance, session handling, and SDKs.
Role type
Senior IC backend engineer (identity & authorization platform)
Builds
Unified access management platform, token issuance services, SDKs, and audit telemetry pipelines for ClickHouse Cloud
Domain
Cloud data warehousing & real-time analytics
Deliverable
production ML models | product features | infrastructure
Required skills
Go, Rust, C++, TypeScript, Python, distributed systems, caching strategies, consistency tradeoffs, multi-region architecture, API design, SDK design, SAML, SCIM, OIDC, OAuth2, MFA, passwordless flows, policy engines, permissions modeling (RBAC/ReBAC/ABAC)
Preferred skills
Zanzibar-style authorization systems, OpenFGA, SpiceDB, Cedar, multi-tenant permission models, identity vendor integration (Auth0, WorkOS, AWS/GCP/Azure IAM)
Technologies
ClickHouse, SQL Console, ClickPipes, HyperDX
Responsibilities
Design and build platform services for authentication, authorization, and audit; Model permissions and access control primitives; Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA; Build audit and authorization-decision telemetry pipeline; Partner with product engineering teams to migrate bespoke auth implementations; Carry platform on-call rotation and own production reliability
Seniority
Senior, hands-on IC
