Senior Software Engineer - Identity & Authorization Platform

Description: Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud. Model permissions and access control primitives for various ClickHouse products. Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Build audit and authorization-decision telemetry pipeline for access decisions. Partner with product teams to migrate bespoke auth implementations to the shared platform. Participate in on-call rotation and ensure production reliability. Requirements: Minimum 4+ years of experience in building production backend systems at scale. Proficiency in at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python). Hands-on experience with authentication or authorization services. Knowledge of SAML, SCIM, OIDC, and OAuth2 protocols. Experience designing APIs and SDKs for other engineers. Familiarity with operating distributed systems at scale. Experience with identity vendors like Auth0, WorkOS, AWS/GCP/Azure IAM. Benefits: Flexible work environment with remote-friendly options. Employer contributions towards healthcare. Stock options for every new team member. Flexible time off policies. USD$500 home office setup for remote employees. Opportunities for global gatherings and in-person connections.