# Senior Software Engineer - Identity & Authorization Platform

**Company**: ClickHouse
**Location**: India
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/clickhouse/f0495f4d-fcc2-4a55-b9d5-5e7dbf20df1d?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_27f81a30-b10

## Description

The Platform Auth team's goal is to support ClickHouse's 'one customer identity' vision by providing tools, processes, and expertise for engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns.

You will:

- Design and build platform services that power authentication, authorization, and audit across ClickHouse Cloud

- Model permissions and access control primitives that work across multiple products

- Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows

- Build the audit and authorization-decision telemetry pipeline

- Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform

- Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request

You bring:

- Minimum 4+ years building production backend systems at scale

- Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python)

- Hands-on experience designing and implementing an authentication or authorization service

- Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level

- Experience designing APIs and SDKs that other engineers depend on

- Experience operating distributed systems at scale

- Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM)

Perks:

- Flexible work environment

- Remote-friendly

- Healthcare

- Employer contributions towards your healthcare

- Equity in the company

- Stock options

- Flexible time off

- Generous entitlement in other countries

- USD$500 Home office setup

- Global Gatherings

## Skills

### Required
- Go
- Rust
- C++
- TypeScript
- Python
- SAML
- SCIM
- OIDC
- OAuth2
- MFA

### Nice to have
- Zanzibar-style authorization system
- OpenFGA or SpiceDB deployment
- multi-tenant permission model
- SDK design

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/clickhouse/f0495f4d-fcc2-4a55-b9d5-5e7dbf20df1d?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)