Senior Software Engineer, ClickHouse
Identity & Authorization Platform
+ Equity
Open-source database for real-time apps and analytics
Open for applications
Open-source database for real-time apps and analytics
201-500 employees
Open for applications
+ Equity
201-500 employees
Company mission
To allow users to generate analytical reports using SQL queries in real-time.
Role
Who you are
- Inimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python)
- Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar
- Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them
- Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable
- Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns
- Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform
- Strong production debugging instincts and a high bar for systems that are easy to develop against
Desirable
- You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo
- You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes
- You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail
What the job involves
- The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space
- Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision
- Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against
- Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end
- Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers
- Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward
- Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request
Our take
Database management systems have long been important to the operations of businesses. However, these systems can be painfully slow. ClickHouse solves this problem with its ultra-fast database management system, that powers real-time analytics and apps.
ClickHouse's founding team hail from companies including Yahoo!, Netflix, Salesforce and Google. This has not only lent the company an impressive amount of credibility, but has also allowed it to identify the needs and challenges of enterprises when it comes to their databases. Its system works between 100 and 1,000 times faster than traditional options, and has led to the company being trusted by the likes of eBay, Uber and Spotify.
It has seen substantial funding too, the most recent of which is cited to help advance its platform across multiple use cases. Alongside this funding, it recently announced the acquisition of LibreChat, an open-source AI chat platform, allowing ClickHouse to launch its Agentic Data Stack. This move positions the company at the forefront of agentic analytics, allowing organizations to interact with massive datasets through AI agents, and demonstrates ClickHouses's commitment to shaping the future of real-time,. intelligent data analysis.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 4 rounds)
Jan 2026
$400m
LATE VC
May 2025
$350m
SERIES C
Total funding: $1.1bn
Company benefits
- Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in 20 countries
- Healthcare - Employer contributions towards your healthcare
- Equity in the company - Every new team member who joins our company receives stock options
- Time off - Flexible time off in the US, generous entitlement in other countries
- A $500 Home office setup if you’re a remote employee
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites
Company HQ
Old Palo Alto, Palo Alto, CA
Leadership
Aaron Katz
(Co-Founder & CEO)Prior to ClickHouse, Aaron spent 6 years at Elastic as CRO and Strategic Advisor. He also spent 12 years at salesforce, joining as a Regional VP of Sales before working through various roles to become the Senior VP of Enterprise Sales.
Yury Izrailevsky
(Co-Founder & President)Previously, Yury spent 3 years at Google as a VP of Engineering, 8 years at Netflix as a Director of Cloud and Systems Infrastructure and VP of CLoud Computing and Platform Engineering, and 8 years at Yahoo! as a Manager of Yahoo Data Warehouse and Director of Engineering.
Alexey Milovidov
(Co-Founder & CTO)Prior to becoming CTO in 2021, Alexey was the Head of CLickHouse and Yandex for over 13 years.
Share this job
View 115 more jobs at ClickHouse