Remote Senior Software Engineer - Identity & Authorization Platform

Description:

• Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
• Model permissions and access control primitives for various ClickHouse products.
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
• Build telemetry pipeline for audit and authorization decisions.
• Partner with product teams to migrate auth implementations to the shared platform.
• Participate in on-call rotation and ensure production reliability.

Requirements:

• Minimum 4+ years of experience in building production backend systems at scale.
• Hands-on experience with authentication or authorization services (e.g., token issuer, OIDC provider).
• Knowledge of SAML, SCIM, OIDC, and OAuth2 protocols.
• Experience designing APIs and SDKs for engineering teams.
• Familiarity with operating distributed systems and caching strategies.
• Experience with identity vendors like Auth0 or AWS IAM.

Benefits:

• Flexible work environment with remote options available.
• Employer contributions towards healthcare.
• Stock options for all new team members.
• Flexible time off policies.
• $500 home office setup for remote employees.
• Opportunities for global gatherings and in-person connections.