Senior Identity & Access Platform Engineer (Remote)

ClickHouse, Inc.; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work environment

Healthcare

Equity in the company

Time off

A USD$500 Home office setup

Global Gatherings

Job summary

ClickHouse, Inc. is hiring engineers to join the Platform Auth team, supporting a unified access management experience.

You will design and build platform services powering authentication, authorization, and audit across ClickHouse Cloud, with API libraries for other engineers to use. You will implement protocol support (SAML, SCIM, OIDC, OAuth2) and build telemetry to observe every access decision, while collaborating with product teams to migrate bespoke auth into the shared platform.

Qualifications

• 4+ years building production backend systems at scale.
• Experience with authentication/authorization services (token issuers, policy engines, or Zanzibar/OpenFGA-style models).
• Knowledge of SAML, SCIM, OIDC, OAuth2 at protocol level and implementation ability.
• Design APIs and SDKs that are adoptable by product teams.
• Operate distributed systems at scale with caching and multi-region concerns.

Responsibilities

• Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
• Model permissions and access control primitives across products and ship libraries/APIs.
• Implement protocol support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
• Build observability for access decisions and telemetry pipelines.
• Migrate bespoke auth implementations to the shared platform and design easy adoption APIs.
• Carry on-call rotation and own production reliability for critical paths.

Skills

Backend engineering

Go

Rust

TypeScript

Python

Authn/Authz design

Distributed systems

Tools

OIDC/OAuth2

SAML/SCIM

SDK design

Job description

ClickHouse, Inc. is hiring engineers to join the Platform Auth team, supporting a unified access management experience.

You will design and build platform services powering authentication, authorization, and audit across ClickHouse Cloud, with API libraries for other engineers to use. You will implement protocol support (SAML, SCIM, OIDC, OAuth2) and build telemetry to observe every access decision, while collaborating with product teams to migrate bespoke auth into the shared platform.