Senior Software Engineer - Identity & Authorization Platform
New
C
ClickHouseCloud Data Analytics
Canada (remote)Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum 4+ years
- Required Skills
- PythonOAuthTypeScriptC++GoRust
Requirements
- Minimum 4+ years of experience building production backend systems at scale.
- Proficiency in at least one systems language: Go, Rust, or C++.
- Proficiency in at least one application language: TypeScript or Python.
- Hands-on experience designing and implementing authentication or authorization services (e.g., token issuers, OIDC/OAuth2 providers, policy engines).
- Experience with FGA/ReBAC systems in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
- Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level.
- Experience designing APIs and SDKs that other engineers depend on.
- Experience operating distributed systems at scale, including caching, consistency, and multi-region concerns.
- Familiarity with identity vendors like Auth0, WorkOS, or cloud IAM (AWS/GCP/Azure).
- Strong production debugging instincts.
Responsibilities
- Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
- Model permissions and access control primitives including resources, roles, relationships, policies, and attributes.
- Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
- Develop telemetry pipelines to make access decisions observable and queryable.
- Partner with engineering teams to migrate bespoke authentication implementations to a shared platform.
- Carry the platform on-call rotation and ensure production reliability for critical system paths.
View Full Description & ApplyYou'll be redirected to the employer's site
