The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team! 

What you will be doing:

• Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision.
• Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against.
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end.
• Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.
• Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward.
• Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.

What you bring along:

• Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
• Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them.
• Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable.
• Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.
• Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform.
• Strong production debugging instincts and a high bar for systems that are easy to develop against.

Bonus:

• You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo.
• You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes.
• You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail.

The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team! 

What you will be doing:

• Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision.
• Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against.
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end.
• Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.
• Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward.
• Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.

What you bring along:

• Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
• Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them.
• Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable.
• Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.
• Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform.
• Strong production debugging instincts and a high bar for systems that are easy to develop against.

Bonus:

• You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo.
• You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes.
• You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail.

The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team! 

What you will be doing:

• Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision.
• Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against.
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end.
• Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.
• Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward.
• Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.

What you bring along:

• Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
• Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them.
• Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable.
• Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.
• Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform.
• Strong production debugging instincts and a high bar for systems that are easy to develop against.

Bonus:

• You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo.
• You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes.
• You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail.

The Platform Auth team’s goal is to support our ‘one customer identity’ vision by providing tools, processes, and expertise for our engineering teams to create a unified access management experience while simplifying and standardizing engineering patterns in the space. We are looking for engineers to join our growing team! 

What you will be doing:

• Design and build the platform services that power authentication, authorization, and audit across ClickHouse Cloud. This includes a unified RBAC/ReBAC service, token issuance and session handling, and the SDKs that product teams embed to make authorization decision.
• Model permissions and access control primitives (resources, roles, relationships, policies) that work across ClickHouse, SQL Console, ClickPipes, and HyperDX. Ship the libraries and APIs that other engineers build against.
• Implement protocol-level support for SAML, SCIM, OIDC, OAuth2, and MFA/passwordless flows. Own the integrations that make enterprise SSO and provisioning work end to end.
• Build the audit and authorization-decision telemetry pipeline so every access decision is observable, queryable, and surfaceable to customers.
• Partner with product engineering teams to migrate bespoke per-product auth implementations onto the shared platform, and design APIs that make adoption straightforward.
• Carry the platform on-call rotation and own production reliability for systems on the critical path of every customer request.

What you bring along:

• Minimum 4+ years building production backend systems at scale. Comfort with at least one systems language (Go, Rust, C++) and one application language (TypeScript, Python).
• Hands-on experience designing and implementing an authentication or authorization service. Examples include building a token issuer, an OIDC or OAuth2 provider, a policy engine, a permissions model, or an FGA/ReBAC system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
• Working knowledge of SAML, SCIM, OIDC, and OAuth2 at the protocol level and are able to implement them.
• Experience designing APIs and SDKs that other engineers depend on, with strong opinions on what makes them adoptable.
• Experience operating distributed systems at scale, including caching strategies, consistency tradeoffs, and multi-region concerns.
• Familiarity with identity vendors (Auth0, WorkOS, AWS/GCP/Azure IAM) as building blocks you've extended or integrated into a larger platform.
• Strong production debugging instincts and a high bar for systems that are easy to develop against.

Bonus:

• You've built or contributed to a Zanzibar-style authorization system, or run an OpenFGA or SpiceDB deployment beyond the demo.
• You've designed a multi-tenant permission model that survived real customer requirements like custom roles, hierarchies, delegation, and ABAC attributes.
• You've shipped an SDK that product teams across an org actually adopted, and have opinions about why most internal SDKs fail.

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for experienced, hands-on security practitioners, who will drive the adoption of modern security processes and tooling, with focus on automation and backed up by data-driven decisions.

What you will do:

• Secure cloud infrastructure supporting the ClickHouse products and services (AWS, GCP and Azure)
• Collaborate with product and engineering teams to facilitate safe and secure use of public cloud infrastructure and resources
• Develop and implement security systems (e.g. CSPM, infrastructure as code, secrets management) to secure and harden ClickHouse cloud infrastructure
• Identify and respond to identified security issues, vulnerabilities, and incidents
• Identify security gaps and vulnerabilities in ClickHouse assets
• Develop processes, tooling and automation to scale security processes and mitigate risks to the business

What you bring along:

• Strong knowledge of and experience with multiple cloud service providers (AWS, GCP, Azure)
• Experience securing large-scale customer-facing cloud infrastructures based on Kubernetes
• Expertise in common cloud-based DevOps practices (e.g. CI/CD, infrastructure as code, secrets management)
• Development and automation experience

Bonus Points:

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)

#LI-JL1

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.

What you will do:

• Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
• Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
• Apply a threat modeling centric approach to incident detection and response
• Maintain security logging platform
• Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
• Handle information security events and incidents across the ClickHouse products and services

What you bring along:

• Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
• Excellent written and verbal communication skills
• Experience securing large-scale customer-facing cloud infrastructures
• Significant development and automation experience; preference for Golang and Python

Bonus Points:

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.

What you will do:

• Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
• Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
• Apply a threat modeling centric approach to incident detection and response
• Maintain security logging platform
• Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
• Handle information security events and incidents across the ClickHouse products and services

What you bring along:

• Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
• Excellent written and verbal communication skills
• Experience securing large-scale customer-facing cloud infrastructures
• Significant development and automation experience; preference for Golang and Python

Bonus Points:

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)

#LI-JL1

We are seeking an experienced Product Manager with a strong background in security to join our dynamic team. This role will be crucial in defining and executing the product strategy for our security offerings, ensuring our products are robust, reliable, and secure, and that they meet the evolving needs of our customers. The ideal candidate will possess a deep understanding of database security, networking, and identity management, and will be adept at navigating the complexities of product development from conception to launch.

What you will do:

• Define and evangelize the product vision, strategy, and roadmap for security-focused features and products.
• Conduct market research, competitive analysis, and customer feedback sessions to identify opportunities and inform product decisions.
• Collaborate closely with engineering, design, sales, and marketing teams to deliver high-quality, secure products.
• Translate complex security requirements into clear, concise product specifications and user stories.
• Prioritize product backlog and manage trade-offs to optimize for business value and customer satisfaction.
• Drive product launch activities, including go-to-market strategy, sales enablement, and user documentation.
• Monitor product performance, gather insights, and iterate on product features based on data and user feedback.
• Act as a subject matter expert for security within the organization, providing guidance and insights to various stakeholders.

About You:

• Minimum of 8+ years of experience in product management in B2B SaaS, with a significant focus on security products or features.
• Proven experience with database security principles and best practices.
• Strong understanding of networking concepts and their implications for security.
• In-depth knowledge of identity and access management (IAM) topics.
• Certifications in security (e.g., CISSP, CISM, CompTIA Security+).
• Demonstrated experience in quality assurance processes and methodologies.
• Solid background in program management, including planning, execution, and risk management.
• Prior experience in security engineering is required.
• Excellent communication, interpersonal, and presentation skills.
• Ability to thrive in a fast-paced, collaborative environment.

Preferred Qualifications:

• Prior experience securing a data platform, database product, or real-time analytics service.
• Familiarity with ClickHouse or other databases such as Snowflake, BigQuery, or Redshift.
• Experience supporting BYOC or private deployment models.
• Background working with open source software or developer-focused products.

We are seeking an experienced Product Manager with a strong background in security to join our dynamic team. This role will be crucial in defining and executing the product strategy for our security offerings, ensuring our products are robust, reliable, and secure, and that they meet the evolving needs of our customers. The ideal candidate will possess a deep understanding of database security, networking, and identity management, and will be adept at navigating the complexities of product development from conception to launch.

What you will do:

• Define and evangelize the product vision, strategy, and roadmap for security-focused features and products.
• Conduct market research, competitive analysis, and customer feedback sessions to identify opportunities and inform product decisions.
• Collaborate closely with engineering, design, sales, and marketing teams to deliver high-quality, secure products.
• Translate complex security requirements into clear, concise product specifications and user stories.
• Prioritize product backlog and manage trade-offs to optimize for business value and customer satisfaction.
• Drive product launch activities, including go-to-market strategy, sales enablement, and user documentation.
• Monitor product performance, gather insights, and iterate on product features based on data and user feedback.
• Act as a subject matter expert for security within the organization, providing guidance and insights to various stakeholders.

About You:

• Minimum of 8+ years of experience in product management in B2B SaaS, with a significant focus on security products or features.
• Proven experience with database security principles and best practices.
• Strong understanding of networking concepts and their implications for security.
• In-depth knowledge of identity and access management (IAM) topics.
• Certifications in security (e.g., CISSP, CISM, CompTIA Security+).
• Demonstrated experience in quality assurance processes and methodologies.
• Solid background in program management, including planning, execution, and risk management.
• Prior experience in security engineering is required.
• Excellent communication, interpersonal, and presentation skills.
• Ability to thrive in a fast-paced, collaborative environment.

Preferred Qualifications:

• Prior experience securing a data platform, database product, or real-time analytics service.
• Familiarity with ClickHouse or other databases such as Snowflake, BigQuery, or Redshift.
• Experience supporting BYOC or private deployment models.
• Background working with open source software or developer-focused products.

About the team 

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our engineering and product teams in improving the security posture of our platforms and services.

Note: This position can be fully remote anywhere in Germany.

What you will do:

• Collaborate with engineering and product on improving existing and building new product features with focus on threat modeling, assurance and secure implementation, some examples of recent work include implementation of secure key management, passwordless authentication, m2m authentication, sandboxing and compute/network/storage isolation
• Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage a wide range of vulnerabilities reported via our bug bounty program, responsible disclosure, GitHub Issues covering web, API and server - client assets including low level memory issues like heap or buffer overflows
• Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
• Drive implementation and usage of engineering security tools - static, dynamic code analysis, dependency checks, code licensing compliance (working knowledge of Snyk, Semgrep, GitHub CodeQL)
• Nurture the engineering - security relationship, identify and implement process and technology improvements
• Handle information security events and incidents across ClickHouse products and services
• Develop processes, tooling and automation to scale security processes and mitigate risks to the business

What you bring along:

• Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as, in some cases, implementation work across distributed systems covering web, API, client/server assets
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium
• Experience implementing and operating engineering security tools and processes (e.g. static / dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, client and network fuzzing tools)
• Significant development and automation experience, ability to work with C++ code
• Security as code mindset, with focus on solving problems with automation and scale in mind

Bonus Points:

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)

We are seeking an experienced Product Manager with a strong background in security to join our dynamic team. This role will be crucial in defining and executing the product strategy for our security offerings, ensuring our products are robust, reliable, and secure, and that they meet the evolving needs of our customers. The ideal candidate will possess a deep understanding of database security, networking, and identity management, and will be adept at navigating the complexities of product development from conception to launch.

What you will do:

• Define and evangelize the product vision, strategy, and roadmap for security-focused features and products.
• Conduct market research, competitive analysis, and customer feedback sessions to identify opportunities and inform product decisions.
• Collaborate closely with engineering, design, sales, and marketing teams to deliver high-quality, secure products.
• Translate complex security requirements into clear, concise product specifications and user stories.
• Prioritize product backlog and manage trade-offs to optimize for business value and customer satisfaction.
• Drive product launch activities, including go-to-market strategy, sales enablement, and user documentation.
• Monitor product performance, gather insights, and iterate on product features based on data and user feedback.
• Act as a subject matter expert for security within the organization, providing guidance and insights to various stakeholders.

About You:

• Minimum of 8+ years of experience in product management in B2B SaaS, with a significant focus on security products or features.
• Proven experience with database security principles and best practices.
• Strong understanding of networking concepts and their implications for security.
• In-depth knowledge of identity and access management (IAM) topics.
• Certifications in security (e.g., CISSP, CISM, CompTIA Security+).
• Demonstrated experience in quality assurance processes and methodologies.
• Solid background in program management, including planning, execution, and risk management.
• Prior experience in security engineering is required.
• Excellent communication, interpersonal, and presentation skills.
• Ability to thrive in a fast-paced, collaborative environment.

Preferred Qualifications:

• Prior experience securing a data platform, database product, or real-time analytics service.
• Familiarity with ClickHouse or other databases such as Snowflake, BigQuery, or Redshift.
• Experience supporting BYOC or private deployment models.
• Background working with open source software or developer-focused products.

About the team 

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our engineering and product teams in improving the security posture of our platforms and services.

Note: This position can be fully remote anywhere in the Netherlands.

What you will do:

• Collaborate with engineering and product on improving existing and building new product features with focus on threat modeling, assurance and secure implementation, some examples of recent work include implementation of secure key management, passwordless authentication, m2m authentication, sandboxing and compute/network/storage isolation
• Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage a wide range of vulnerabilities reported via our bug bounty program, responsible disclosure, GitHub Issues covering web, API and server - client assets including low level memory issues like heap or buffer overflows
• Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
• Drive implementation and usage of engineering security tools - static, dynamic code analysis, dependency checks, code licensing compliance (working knowledge of Snyk, Semgrep, GitHub CodeQL)
• Nurture the engineering - security relationship, identify and implement process and technology improvements
• Handle information security events and incidents across ClickHouse products and services
• Develop processes, tooling and automation to scale security processes and mitigate risks to the business

What you bring along:

• Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as, in some cases, implementation work across distributed systems covering web, API, client/server assets
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium
• Experience implementing and operating engineering security tools and processes (e.g. static / dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, client and network fuzzing tools)
• Significant development and automation experience, ability to work with C++ code
• Security as code mindset, with focus on solving problems with automation and scale in mind

Bonus Points:

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)