Senior Software Engineer – Identity & Authorization Platform

This is a fully remote position, open to applicants in Germany, +5 more countries.

📋 Description

• Design and develop platform services that facilitate authentication, authorization, and auditing across ClickHouse Cloud.

• Create unified RBAC/ReBAC services, manage token issuance and session handling, and develop SDKs for product teams.

• Model permissions and access control primitives for ClickHouse, SQL Console, ClickPipes, and HyperDX.

• Deliver libraries and APIs for other engineers to utilize.

• Implement support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless protocols.

• Take ownership of enterprise SSO and provisioning integrations from start to finish.

• Construct audit and authorization-decision telemetry pipelines.

• Collaborate with product engineering teams to transition custom authentication implementations to the shared platform.

• Design APIs that facilitate seamless platform adoption.

• Participate in the platform on-call rotation and ensure production reliability for critical-path systems.

⛳️ Requirements

• A minimum of 4+ years of experience in building production backend systems at scale.

• Proficiency in at least one systems programming language: Go, Rust, or C++.

• Proficiency in at least one application programming language: TypeScript or Python.

• Direct experience in designing and implementing an authentication or authorization service.

• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level with the capability to implement them.

• Experience in designing APIs and SDKs that are utilized by other engineers.

• Experience in operating distributed systems at scale, including understanding caching strategies, consistency trade-offs, and multi-region challenges.

• Familiarity with identity vendors like Auth0, WorkOS, AWS IAM, GCP IAM, or Azure IAM.

• Strong skills in production debugging.

• Experience with Zanzibar-style authorization systems, OpenFGA, or SpiceDB deployment is advantageous.

• Experience in designing multi-tenant permission models is a plus.

• Experience in shipping widely adopted SDKs is a plus.

🏝️ Benefits

• Flexible work environment; remote-friendly.

• Employer contributions towards healthcare.

• Stock options/equity in the company.

• Flexible time off in the US.

• Generous time-off entitlement in other countries.

• USD$500 home office setup for remote employees.

• Opportunities to connect with colleagues at company-wide offsites.