{"id":583605,"url":"https://alion.io/job/clickhouse-dev-senior-software-engineer-identity-authorization-platform","title":"Senior Software Engineer - Identity & Authorization Platform","company":{"id":3448,"name":"ClickHouse","domain":"clickhouse.com","url":"https://alion.io/company/clickhouse","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":82,"open_postings":38,"ghost_share":0,"stale_share":0.526,"repost_share":0,"time_to_fill_p50_days":70,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":47000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":139},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C++","optional":false},{"name":"ClickHouse","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"SQL","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-06-22T14:23:40Z","employer_posted_date":"2026-06-22","last_verified_at":"2026-10-17T11:06:44Z","board_verified":true,"closed_at":null,"days_open":116,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":116},"description":"The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team!\nWhat you will be doing:\nDesign and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision.\n\nModel permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against.\n\nImplement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end.\n\nBuild the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.\n\nPartner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward.\n\nCarry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.\n\nWhat you bring along:\nMinimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).\n\nHands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.\n\nWorking knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them.\n\nExperience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable.\n\nExperience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.\n\nFamiliarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform.\n\nStrong production debugging instincts and a high bar for systems that are easy to develop against.\n\nBonus:\nYou've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo.\n\nYou've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes.\n\nYou've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail.\n\nPerks\nFlexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.\n\nHealthcare - Employer contributions towards your healthcare.\n\nEquity in the company - Every new team member who joins our company receives stock options.\n\nTime off - Flexible time off in the US, generous entitlement in other countries.\n\nA USD$500 Home office setup if you’re a remote employee.\n\nGlobal Gatherings - We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.\n\nCulture - We All Shape It\nAs part of a rapidly scaling start-up, you will be instrumental in shaping our culture.\nAre you interested in finding out more about our culture? Learn more about our values here. Check out ourblog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.\nEqual Opportunity & Privacy\nClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.\nPlease see here for our Privacy Statement.","description_format":"text","description_chars":4299,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Flexible time off","Home office","Stock options"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Warehouses & Lakehouses","Databases & DBMS"],"lifecycle":[{"event":"open","at":"2026-09-10T00:51:39Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.555,"p_room":0.36,"age_days":116,"expected_fill_days":70,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/clickhouse-dev-senior-software-engineer-identity-authorization-platform","json_url":"https://alion.io/job/clickhouse-dev-senior-software-engineer-identity-authorization-platform.json","meta":{"generated_at":"2026-10-17T13:31:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18229,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3448},"rest":"https://alion.io/mcp/rest/get_company?id=3448"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclickhouse-dev-senior-software-engineer-identity-authorization-platform"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclickhouse-dev-senior-software-engineer-identity-authorization-platform"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclickhouse-dev-senior-software-engineer-identity-authorization-platform"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clickhouse-dev-senior-software-engineer-identity-authorization-platform\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclickhouse-dev-senior-software-engineer-identity-authorization-platform"}]}