C

Senior Backend Engineer - Platform Authentication (RBAC/ReBAC, OIDC, SAML)

ClickHouse • United Kingdom
Full Remote
Apply Now

Build and maintain a unified authentication, authorization, and audit platform for ClickHouse Cloud. Design RBAC/ReBAC services, token issuance, and SDKs for cross-product access control. Implement SAML, SCIM, OIDC, OAuth2, and MFA integrations while ensuring production reliability and observability.

Key Highlights
Design and implement RBAC/ReBAC, token issuance, and SDKs for unified access control across ClickHouse products.
Protocol-level expertise in SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
Build observable audit and authorization telemetry pipelines for customer-facing decisions.
Key Responsibilities
Design and build platform services for authentication, authorization, and audit across ClickHouse Cloud.
Implement RBAC/ReBAC, token issuance, session handling, and SDKs for product teams.
Develop protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows.
Build audit and authorization-decision telemetry pipelines for observability.
Partner with product engineering teams to migrate bespoke auth implementations.
Carry on-call rotation and ensure production reliability for critical systems.
Technical Skills Required
Authentication/Authorization Systems (RBAC/ReBAC, OIDC, OAuth2, SAML) Distributed Systems (scaling, caching, multi-region consistency) Backend Development (Go/Rust/C++/TypeScript/Python)
Benefits & Perks
Flexible work environment (remote-friendly, globally distributed)
Employer-contributed healthcare
Company equity (stock options)
Generous time-off policies
$500 home office setup for remote employees
Global gatherings and in-person offsites
Nice to Have
Experience with Zanzibar-style authorization systems (e.g., OpenFGA, SpiceDB).
Designed multi-tenant permission models handling custom roles, hierarchies, delegation, and ABAC attributes.
Shipped an SDK adopted by product teams with insights on internal SDK failures.

Job Description

The Platform Auth team aims to support a ‘one customer identity’ vision by providing tools, processes, and expertise for engineering teams to create a unified access management experience while standardizing engineering patterns.

What You Will Be Doing

Want the full job description? Read the complete details on LinkedIn, the original posting.
Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.

See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources
Keep exploring

Similar Jobs

Explore other opportunities that match your interests

Remote Work Guides

Practical guides for finding and thriving in remote roles.

Browse all articles

Subscribe to our newsletter

New visa sponsorship, relocation and remote tech jobs, delivered to your inbox.