Senior Software Engineer – Identity & Authorization Platform

This is a fully remote position, open to applicants in India, +2 more countries.

📋 Description

• Create and develop platform services that facilitate authentication, authorization, and auditing within ClickHouse Cloud.

• Develop cohesive RBAC/ReBAC services, manage token issuance, session handling, and create SDKs for product teams.

• Design permission models and access-control fundamentals for ClickHouse, SQL Console, ClickPipes, and HyperDX.

• Deliver libraries and APIs for use by fellow engineers.

• Execute implementations of SAML, SCIM, OIDC, OAuth2, and MFA/passwordless protocols.

• Take ownership of enterprise SSO and provisioning integrations from start to finish.

• Construct telemetry pipelines for audit and authorization decisions.

• Collaborate with product engineering teams to transition custom authentication solutions to the unified platform.

• Create APIs that simplify platform adoption.

• Participate in the platform on-call rotation and ensure production reliability for essential systems.

⛳️ Requirements

• At least 4+ years of experience in building production backend systems at scale.

• Proficiency in at least one systems programming language: Go, Rust, or C++.

• Proficiency in at least one application programming language: TypeScript or Python.

• Practical experience in designing and implementing an authentication or authorization service.

• Familiarity with SAML, SCIM, OIDC, and OAuth2 at the protocol level, with the capability to implement them.

• Experience in designing APIs and SDKs for use by other engineers.

• Experience in operating distributed systems at scale, including knowledge of caching strategies, consistency trade-offs, and multi-region considerations.

• Understanding of identity vendors such as Auth0, WorkOS, and AWS/GCP/Azure IAM.

• Strong instincts for production debugging.

• Experience with Zanzibar-style authorization systems, OpenFGA, or SpiceDB deployments is an advantage.

• Experience in designing multi-tenant permission models is a plus.

• Experience in delivering widely adopted SDKs is a plus.

🏝️ Benefits

• Flexible work environment; remote-friendly.

• Employer contributions towards healthcare.

• Stock options available for every new team member.

• Flexible time off policy in the US.

• Generous time-off entitlement for employees in other countries.

• USD$500 allowance for home office setup for remote employees.

• Opportunities to connect with colleagues during company-wide offsite events.