Senior Software Engineer - Identity & Authorization Platform

Stack

Apply

Upload your CV — we will connect you with the employer directly through our pool.

Description

The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team!  What you will be doing: - Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision. - Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against. - Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end. - Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers. - Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward. - Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request. What you bring along: - Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python). - Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar. - Working knowledge of SAML, SCIM, OIDC, an

Employer contacts (email/phone/telegram) are hidden from the public preview — send your CV, and we will connect you directly.