Senior Software Engineer - Identity & Authorization Platform

📋 Description

• Design and build the platform services that power authentication, authorization, and audit across
• Model permissions and access control primitives (resources, roles, relationships, policies) that
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the
• Build the audit and authorization-decision telemetry pipeline so every access decision is
• Partner with product engineering teams to migrate bespoke per-product auth implementations onto the
• Carry the platform on-call rotation and own production reliability for systems on the critical path

🎯 Requirements

• Minimum 4+ years building production backend systems at scale. Comfort with at least one systems
• Hands-on experience designing and implementing an authentication or authorization service. Examples
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement
• Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what
• Experience operating distributed systems at scale, including caching strategies, consistency
• Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've

🎁 Benefits

• Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We
• Healthcare - Employer contributions towards your healthcare.
• Equity in the company - Every new team member who joins our company receives stock options.
• Time off - Flexible time off in the US, generous entitlement in other countries.
• A USD$500 Home office setup if you're a remote employee.
• Global Gatherings – We believe in the power of in-person connection and offer opportunities to