Remote Senior Software Engineer - Identity & Authorization Platform

Description:

• Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
• Model permissions and access control primitives for various ClickHouse products.
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
• Build audit and authorization-decision telemetry pipeline for access decisions.
• Partner with product teams to migrate bespoke auth implementations to the shared platform.
• Participate in on-call rotation and ensure production reliability.

Requirements:

• Minimum 4+ years of experience in building production backend systems at scale.
• Proficiency in at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
• Hands-on experience with authentication or authorization services.
• Knowledge of SAML, SCIM, OIDC, and OAuth2 protocols.
• Experience designing APIs and SDKs for other engineers.
• Familiarity with operating distributed systems at scale.
• Experience with identity vendors like Auth0, WorkOS, AWS/GCP/Azure IAM.

Benefits:

• Flexible work environment with remote-friendly options.
• Employer contributions towards healthcare.
• Stock options for every new team member.
• Flexible time off policies.
• USD$500 home office setup for remote employees.
• Opportunities for global gatherings and in-person connections.