Senior Software Engineer - Identity & Authorization Platform

## About the Role The Senior Software Engineer position at ClickHouse is a unique opportunity to work on the company's identity and authorization platform. This role entails designing and building platform services that power authentication, authorization, and audit across ClickHouse Cloud. The successful candidate will be part of a growing team that supports the 'one customer identity' vision, providing tools, processes, and expertise for engineering teams to create a unified access management experience.

The Platform Auth team's goal is to simplify and standardize engineering patterns in the space, and the Senior Software Engineer will play a key role in achieving this objective. This involves collaborating with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform and designing APIs that make adoption straightforward.

ClickHouse is recognized as one of the most innovative and fast-growing private cloud companies, with more than 3,000 customers and ARR that has grown over 250 percent year over year. The company leads the market in real-time analytics, data warehousing, observability, and AI workloads, making this an exciting time to join the team.

## What You Will Do - Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud.

• Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX.
• Ship the libraries and APIs that other engineers build against.
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
• Own the integrations that make enterprise SSO and provisioning work end to end.
• Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.
• Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform.
• Design APIs that make adoption straightforward.
• Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.
• Collaborate with cross-functional teams to ensure the platform meets the company's security and compliance requirements.

## What We Are Looking For - Minimum 4+ years of experience building production backend systems at scale.

• Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
• Hands-on experience designing and implementing an authentication or authorization service.
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
• Experience designing APIs and SDKs that other engineers depend on.
• Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.
• Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform.
• Strong production debugging instincts and a high bar for systems that are easy to develop against.

## Nice to Have - Experience with Adjust and Excel.

• Experience building or contributing to a Zanzibar-style authorization system.
• Experience designing a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes.
• Experience shipping an SDK that product teams across an org actually adopted.

## Benefits and Perks - Opportunity to work on a cutting-edge identity and authorization platform.

• Collaborative and dynamic work environment.
• Professional development opportunities.
• Flexible working hours and remote work options.
• Access to the latest tools and technologies.
• Competitive compensation package.
• Comprehensive health insurance.
• Generous paid time off policy.
• Remote stipend to support your home office setup.

- Ensure your resume and cover letter are tailored to the specific requirements of the Senior Software Engineer role, highlighting your experience with authentication and authorization systems.

• Be prepared to discuss your experience with distributed systems and API design during the interview process.
• Showcase your problem-solving skills by providing examples of complex problems you've solved in previous roles.
• Familiarize yourself with ClickHouse's products and services to demonstrate your understanding of the company's goals and vision.
• Be ready to discuss your experience with protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
• Practice explaining technical concepts in simple terms to demonstrate your ability to communicate effectively with cross-functional teams.