ClickHouse
Senior Software Engineer - Identity & Authorization Platform
United States (remote) · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- About ClickHouse Recognized on the 2025 Forbes Cloud 100 list, ClickHouse is one of the most innovative and fast-growing private cloud companies.
- The company's sustained, accelerating momentum was recently validated by a $400M Series D financing round.
- Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python). - Hands-on experience designing and implementing an authentication or authorization service.
Responsibilities
- Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud.
- Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against.
- Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end.
- Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.
- Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward.
- Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.
- Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
- Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
- Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them.
- Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform.
Compensation
- The typical starting salary for this role in the US is
Benefits
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new team member who joins our company receives stock options.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly.
- A $500 Home office setup if you're a remote employee.
Company info
- Over the past three months, customers including Capital One, Lovable, Decagon, Polymarket, and Airwallex have adopted the platform or expanded existing deployments.
- These customers join an established base of AI innovators and global brands such as Meta, Cursor, Sony, and Tesla.
- We are looking for engineers to join our growing team!
- As part of a rapidly scaling start up, you will be instrumental in shaping our culture.
- Are you interested in finding out more about our culture?
- Learn more about our values here.
Equal opportunity
- Equal Opportunity & Privacy
This listing is sourced directly from ClickHouse's careers page and normalized into a canonical job model.