ClickHouse - Senior Software Engineer - Identity & Authorization Platform
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python). • Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar. • Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them. • Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable. • Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns. • Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform. • Strong production debugging instincts and a high bar for systems that are easy to develop against. • Bonus: • You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo. • You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes. • You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail.
Responsibilities
• Develop, manage and collaborate with other engineering teams for authentication, authorization, audit logging and monitoring • Ensure customers and internal users are provided a secure, user-friendly way to access systems, including support for SAML, SCIM, MFA and passwordless auth • Ensure resources have the proper level of authorization that is secure, easy for users to understand and easy for engineers to develop against • Ensure events are captured for analysis and surfaced for both internal teams and customers as appropriate • Collaborate with other engineering teams to understand database access management patterns, provide guidance for security or usability improvements and contribute where possible • Collaborate with other engineering teams to understand integration patterns for third party systems and work to develop common patterns and platforms to enable secure management of credentials for this application • Ensure systems comply with relevant security and compliance frameworks, such as NIST • Create and maintain internal documentation to enable other teams to on-board and integrate with identity & access management systems • Respond to on-call escalations involving the identity and access management platform
Benefits
• For roles based in the United States, the typical starting salary range for this position is listed above. In certain locations, such as the San Francisco Bay Area and the New York City Metro Area, a premium market range may apply, as listed. • United States • These salary ranges reflect what we reasonably and in good faith believe to be the minimum and maximum pay for this role at the time of posting. The actual compensation may be higher or lower than the amounts listed, and the ranges may be subject to future adjustments. • An individual’s placement within the range will depend on various factors, including (but not limited to) education, qualifications, certifications, experience, skills, location, performance, and the needs of the business or organization. • If you have any questions or comments about compensation as a candidate, please get in touch with us at [email protected]. • Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 20 countries. • Flexible work environment • Healthcare - Employer contributions towards your healthcare. • Healthcare • Equity in the company - Every new team member who joins our company receives stock options. • Equity in the company • Time off - Flexible time off in the US, generous entitlement in other countries. • Time off • A $500 Home office setup if you’re a remote employee. • A $500 Home office setup • Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. • Global Gatherings • Culture - We All Shape It • As part of a rapidly scaling start up, you will be instrumental in shaping our culture. • Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse. • Equal Opportunity & Privacy
No credit card. Takes 10 seconds.