Description
The Platform Auth team's goal is to support ClickHouse's 'one customer identity' vision by providing tools, processes, and expertise for engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns.
You will:
- Design and build platform services that power authentication, authorization, and audit across ClickHouse Cloud
- Model permissions and access control primitives that work across multiple products
- Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows
- Build the audit and authorization-decision telemetry pipeline
- Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform
- Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request
You bring:
- Minimum 4+ years building production backend systems at scale
- Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python)
- Hands-on experience designing and implementing an authentication or authorization service
- Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level
- Experience designing APIs and SDKs that other engineers depend on
- Experience operating distributed systems at scale
- Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM)
Perks:
- Flexible work environment
- Remote-friendly
- Healthcare
- Employer contributions towards your healthcare
- Equity in the company
- Stock options
- Flexible time off
- Generous entitlement in other countries
- USD$500 Home office setup
- Global Gatherings