Senior Software Engineer - Identity & Authorization Platform

ClickhouseClickhouse·Remote(Canada (remote))
Software Development
Adjust

WFA Digital Insight

As the demand for skilled software engineers in identity and authorization grows, ClickHouse stands out with its innovative approach to real-time analytics and data warehousing. With over 3,000 customers, the company is on a mission to transform how companies use data. Candidates with expertise in designing and implementing authentication or authorization services are in high demand, with a 25% increase in job postings in the last year. Before applying, candidates should be aware of the complex technical requirements and the need for strong problem-solving skills.

Job Description

About the Role

The Senior Software Engineer will play a crucial role in designing and building the platform services that power authentication, authorization, and audit across ClickHouse Cloud. The ideal candidate will have experience in building production backend systems at scale and a strong understanding of identity and access management systems. As part of the Platform Auth team, the Senior Software Engineer will work closely with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform. The team's goal is to support the 'one customer identity' vision by providing tools, processes, and expertise for engineering teams to create a unified access management experience. ClickHouse is a fast-growing private cloud company, recognized on the 2025 Forbes Cloud 100 list, with a sustained momentum validated by a $400M Series D financing round. The company has a strong base of AI innovators and global brands, including Meta, Cursor, Sony, and Tesla, and is on a mission to transform how companies use data.

What You Will Do

  • Design and build platform services that power authentication, authorization, and audit across ClickHouse Cloud
  • Model permissions and access control primitives that work across ClickHouse, SQL Console, ClickPipes, and HyperDX
  • Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows
  • Own the integrations that make enterprise SSO and provisioning work end to end
  • Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers
  • Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform
  • Design APIs that make adoption straightforward
  • Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request

What We Are Looking For

  • Minimum 4+ years of experience building production backend systems at scale
  • Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python)
  • Hands-on experience designing and implementing an authentication or authorization service
  • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level
  • Experience designing APIs and SDKs that other engineers depend on
  • Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns
  • Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM)

Nice to Have

  • Experience with Zanzibar-style authorization systems or OpenFGA/SpiceDB deployments
  • Experience designing a multi-tenant permission model that survived real customer requirements
  • Experience shipping an SDK that product teams across an org actually adopted

Benefits and Perks

  • Opportunity to work with a fast-growing private cloud company
  • Collaborative and dynamic work environment
  • Professional development opportunities
  • Flexible working hours and remote work options
  • Competitive salary and benefits package
  • Access to the latest technologies and tools
  • Recognition and rewards for outstanding performance

How to Stand Out

  • Make sure to highlight your experience with authentication and authorization services in your resume and cover letter.
  • Be prepared to explain your understanding of SAML, SCIM, OIDC, and OAuth2 protocols in the interview.
  • Showcase your ability to design and implement APIs and SDKs that other engineers depend on.
  • Emphasize your experience with distributed systems and cloud-based technologies.
  • Prepare examples of your experience with identity vendors and access management systems.
  • Be ready to discuss your approach to security and compliance in a cloud-based environment.

This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.